Vendors / Wpseeds Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now Wpseeds records in CISA KEV No Wpseeds vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 69
The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldump function.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.22051 · Published 2025-07-25 · Fixed in 5.2 CWE-78
Priority LOW 39
The wp-database-backup plugin before 4.3.1 for WordPress has CSRF.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00693 · Published 2019-08-12 · No fix listed CWE-352
Priority LOW 39
The wp-database-backup plugin before 4.3.3 for WordPress has CSRF.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00679 · Published 2019-08-12 · No fix listed CWE-352
Priority LOW 37
The WP Database Backup plugin through 5.5 for WordPress stores downloads by default locally in the directory wp-content/uploads/db-backup/.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02431 · Published 2020-01-20 · No fix listed CWE-330
Priority LOW 29
The wp-database-backup plugin before 5.1.2 for WordPress has XSS.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00946 · Published 2019-08-12 · No fix listed CWE-79
Priority LOW 29
The wp-database-backup plugin before 4.3.1 for WordPress has XSS.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00924 · Published 2019-08-12 · No fix listed CWE-79
Priority LOW 29
The wp-database-backup plugin before 4.3.3 for WordPress has XSS.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00924 · Published 2019-08-12 · No fix listed CWE-79
Priority LOW 26
The WP User plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters in versions up to, and including, 7.0 due to insufficient input sanitization and output escaping.
CVSS 3.1 MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.00585 · Published 2022-12-15 · No fix listed CWE-79
Priority LOW 23
The WP Database Backup WordPress plugin before 5.9 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capabi…
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00518 · Published 2022-09-05 · Fixed in 5.9 CWE-79
Open these records in search → All records by CVSS severity
1 3 5 0 0
THREATIST.IORead the docs