Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: databasebackup Clear all filters
TI-2026-08613 CVE-2026-9834 · GHSA-9g3c-r4j4-8m9r

WP Database Backup <= 7.11 - Authenticated (Administrator+) OS Command Injection via 'wp_db_exclude_table' Parameter

Priority LOW 39

The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to OS Command Injection in all versions up to and including 7.11 via the `wp_db_exclude_table` parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02651 Published 2026-07-02 No fix listed CWE-77
TI-2024-11437 CVE-2024-12330 · GHSA-424p-2fvv-chq4

WP Database Backup – Unlimited Database & Files Backup by Backup for WP <= 7.3…

Priority LOW 39

The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.3 via publicly accessible back-up f…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00517 Published 2025-01-09 No fix listed CWE-530