Vulnerabilities

TI-2019-15278 CVE-2019-25224 · GHSA-xwcj-w2w2-2g7c

WP Database Backup < 5.2 - Unauthenticated OS Command Injection

HIGH 69

The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldump function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.22051 Published 2025-07-25 Fixed in 5.2 CWE-78

TI-2022-02096 CVE-2022-2271 · GHSA-x44q-mwr9-fc57

WP Database Backup < 5.9 - Admin+ Stored Cross-Site Scripting

LOW 23

The WP Database Backup WordPress plugin before 5.9 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capabi…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00518 Published 2022-09-05 Fixed in 5.9 CWE-79

TI-2020-05848 CVE-2020-7241 · GHSA-jqvr-gmgr-wg44

The WP Database Backup plugin through 5.5 for WordPress stores downloads by default…

LOW 37

The WP Database Backup plugin through 5.5 for WordPress stores downloads by default locally in the directory wp-content/uploads/db-backup/.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02431 Published 2020-01-20 No fix listed CWE-330

TI-2019-11147 CVE-2019-14949 · GHSA-84vf-855g-2hmj

The wp-database-backup plugin before 5.1.2 for WordPress has XSS.

LOW 29

The wp-database-backup plugin before 5.1.2 for WordPress has XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00946 Published 2019-08-12 No fix listed CWE-79

TI-2016-08911 CVE-2016-10873 · GHSA-xgwp-88wx-4cww

The wp-database-backup plugin before 4.3.3 for WordPress has XSS.

LOW 29

The wp-database-backup plugin before 4.3.3 for WordPress has XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00924 Published 2019-08-12 No fix listed CWE-79

TI-2016-08912 CVE-2016-10874 · GHSA-fm9g-gq64-xw4h

The wp-database-backup plugin before 4.3.3 for WordPress has CSRF.

LOW 39

The wp-database-backup plugin before 4.3.3 for WordPress has CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00679 Published 2019-08-12 No fix listed CWE-352

TI-2016-08913 CVE-2016-10875 · GHSA-whpf-4g8g-hppc

The wp-database-backup plugin before 4.3.1 for WordPress has XSS.

LOW 29

The wp-database-backup plugin before 4.3.1 for WordPress has XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00924 Published 2019-08-12 No fix listed CWE-79

TI-2016-08914 CVE-2016-10876 · GHSA-gx66-hpfp-g9jr

The wp-database-backup plugin before 4.3.1 for WordPress has CSRF.

LOW 39

The wp-database-backup plugin before 4.3.1 for WordPress has CSRF.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00693 Published 2019-08-12 No fix listed CWE-352

Vulnerabilities

Filters