« Volver al listado

Wpseeds

Wpseeds WP Database Backup: vulnerabilidades y CVE

Wpseeds WP Database Backup tiene 10 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.

CVE10
Últimos 12 meses1
Críticas1
Explotadas activamente0

Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología

Últimas vulnerabilidades

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2026-9834Alta (7.2)2.7%—2 jul 2026
The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to OS Command Injection in all versions up to and including 7.11 via the `wp_db_exclude_table` parameter.…
CVE-2019-25224Crítica (9.8)21%—25 jul 2025
The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldump function. This vulnerability allows unauthenticated attackers to execute arbitrary commands on…
CVE-2024-12330Alta (7.5)0.51%—9 ene 2025
The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.3 via publicly accessible back-up…
CVE-2022-2271Media (4.8)0.51%—5 sept 2022
The WP Database Backup WordPress plugin before 5.9 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html…
CVE-2020-7241Alta (7.5)2.4%—20 ene 2020
The WP Database Backup plugin through 5.5 for WordPress stores downloads by default locally in the directory wp-content/uploads/db-backup/. This might allow attackers to read ZIP archives by guessing random ID numbers,…
CVE-2019-14949Media (6.1)0.95%—12 ago 2019
The wp-database-backup plugin before 5.1.2 for WordPress has XSS.
CVE-2016-10876Alta (8.8)0.69%—12 ago 2019
The wp-database-backup plugin before 4.3.1 for WordPress has CSRF.
CVE-2016-10875Media (6.1)0.92%—12 ago 2019
The wp-database-backup plugin before 4.3.1 for WordPress has XSS.
CVE-2016-10874Alta (8.8)0.68%—12 ago 2019
The wp-database-backup plugin before 4.3.3 for WordPress has CSRF.
CVE-2016-10873Media (6.1)0.92%—12 ago 2019
The wp-database-backup plugin before 4.3.3 for WordPress has XSS.

🎯 Cómo se explota (técnicas ATT&CK)

  1. T1059 Command and Scripting Interpreter2
  2. T1190 Exploit Public-Facing Application2
  3. T1005 Data from Local System1
  4. T1210 Exploitation of Remote Services1

Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.

Otros productos de Wpseeds