Unknown BackWPup vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20264

Newest CVEs

• CVE-2026-86828

  BackWPup < 5.7.7 - Admin+ Path Traversal to RCE via Restore PclZip Fallback

  Unknown · BackWPup

  Medium6.6
• CVE-2026-86827

  BackWPup 3.3 - 5.7.6 - Unauthenticated Backup Job Execution via wp-cron.php

  Unknown · BackWPup

  Medium5.3
• CVE-2026-86826

  BackWPup < 5.7.7 - Unauthenticated Sensitive Data Disclosure via Restore Working Directory on NGINX

  Unknown · BackWPup

  Medium5.9
• CVE-2026-86815

  BackWPup 5.2.2 - 5.7.4 - BackWPup Jobs Checker+ Database Backup Exfiltration via Missing Authorization on Job REST Routes

  Unknown · BackWPup

  Medium5.5
• CVE-2023-7164

  BackWPup < 4.0.4 - Unauthenticated Backup Download

  Unknown · BackWPup

  High7.5