Extension WordPress
Vulnérabilités WP Database Backup – Unlimited Database & Files Backup by Backup for WP
Cette page rassemble les failles publiées pour WP Database Backup – Unlimited Database & Files Backup by Backup for WP, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WP Database Backup – Unlimited Database & Files Backup by Backup for WP
14 fiches
WP Database Backup <= 7.11 – Authenticated (Administrator+) OS Command Injection via 'wp_db_exclude_table' Parameter
The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to OS Command Injection in all versions up to and including 7.11 via the `wp_db_exclude_table` parameter. This is due…
*-7.11
7.12
01/07/2026
WP Database Backup – Unlimited Database & Files Backup by Backup for WP <= 7.3 – Unauthenticated Database Back-Up Exposure
The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.3 via publicly accessible back-up files. This makes…
*-7.3
7.4
08/01/2025
WP Database Backup <= 5.8.3 – Authenticated (Admin+) Stored Cross-Site Scripting
The WP Database Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 5.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers…
*-5.8.3
5.9
16/08/2022
WP Database Backup <= 5.9 – Authenticated (Admin+) Stored Cross-Site Scripting
The WP Database Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 5.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers…
*-5.8
5.9
09/08/2022
WP Database Backup <= 5.5 – Unauthenticated Information Disclosure
The WP Database Backup plugin through 5.5 for WordPress stores downloads by default locally in the directory wp-content/uploads/db-backup/. This might allow attackers to read ZIP archives by guessing random ID numbers, guessing date strings with a 2020_{0..1}{0..2}_{0..3}{0..9} format,…
*-5.5
5.5.1
06/02/2020
WP Database Backup < 5.2 – Unauthenticated OS Command Injection
The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldump function. This vulnerability allows unauthenticated attackers to execute arbitrary commands on the host operating system.
[*, 5.2)
5.2
24/04/2019
WP Database Backup <= 5.1.1 – Cross-Site Scripting
The wp-database-backup plugin before 5.1.2 for WordPress has XSS.
*-5.1.1
5.1.2
22/04/2019
WP Database Backup <= 5.1.2 – Unauthenticated Settings Update to Remote Code Execution
The WP Database Backup plugin for WordPress is vulnerable to unauthenticated settings update that can lead to remote code execution via the wpsetting functionality in versions up to, and including, 5.1.2. This makes it possible for unauthenticated attackers…
*-5.1.2
5.1.3
24/03/2019
WP Database Backup <= 4.3.5 – Cross-Site Request Forgery
The WP Database Backup plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.3.5. This is due to missing or incorrect nonce validation on the wp_db_backup_admin_init() function. This makes it possible for…
[*, 4.3.6)
4.3.6
21/10/2016
WP Database Backup <= 4.3.2 – Cross-Site Request Forgery
The wp-database-backup plugin before 4.3.3 for WordPress has CSRF.
[*, 4.3.3)
4.3.3
04/08/2016
WP Database Backup <= 4.3.2 – Cross-Site Scripting
The wp-database-backup plugin before 4.3.3 for WordPress has XSS.
[*, 4.3.3)
4.3.3
03/08/2016
WP Database Backup <= 4.3 – Cross-Site Scripting
The wp-database-backup plugin before 4.3.1 for WordPress has XSS.
[*, 4.3.1)
4.3.1
01/08/2016
WP Database Backup <= 4.3 – Cross-Site Request Forgery
The wp-database-backup plugin before 4.3.1 for WordPress has CSRF.
*-4.3
4.3.1
08/04/2016
WP Database Backup < 3.4 – Authenticated Stored Cross-Site Scripting
The WP Database Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions before 3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary…
[*, 3.4)
3.4
20/08/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.