Product:

Wp_database_backup

(Wpseeds)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 8
Date Id Summary Products Score Patch Annotated
2025-07-25 CVE-2019-25224 The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldump function. This vulnerability allows unauthenticated attackers to execute arbitrary commands on the host operating system. Wp_database_backup 9.8
2020-01-20 CVE-2020-7241 The WP Database Backup plugin through 5.5 for WordPress stores downloads by default locally in the directory wp-content/uploads/db-backup/. This might allow attackers to read ZIP archives by guessing random ID numbers, guessing date strings with a 2020_{0..1}{0..2}_{0..3}{0..9} format, guessing UNIX timestamps, and making HTTPS requests with the complete guessed URL. Wp_database_backup 7.5
2022-09-05 CVE-2022-2271 The WP Database Backup WordPress plugin before 5.9 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup) Wp_database_backup 4.8
2019-08-12 CVE-2016-10873 The wp-database-backup plugin before 4.3.3 for WordPress has XSS. Wp_database_backup 6.1
2019-08-12 CVE-2016-10874 The wp-database-backup plugin before 4.3.3 for WordPress has CSRF. Wp_database_backup 8.8
2019-08-12 CVE-2016-10875 The wp-database-backup plugin before 4.3.1 for WordPress has XSS. Wp_database_backup 6.1
2019-08-12 CVE-2019-14949 The wp-database-backup plugin before 5.1.2 for WordPress has XSS. Wp_database_backup 6.1
2019-08-12 CVE-2016-10876 The wp-database-backup plugin before 4.3.1 for WordPress has CSRF. Wp_database_backup 8.8