Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: Wpseeds Clear all filters
TI-2019-15278 CVE-2019-25224 · GHSA-xwcj-w2w2-2g7c

WP Database Backup < 5.2 - Unauthenticated OS Command Injection

Priority HIGH 69

The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldump function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.22051 Published 2025-07-25 Fixed in 5.2 CWE-78
TI-2022-04129 CVE-2022-4519 · GHSA-p8vq-qmrg-7g2v

WP User <= 7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

Priority LOW 26

The WP User plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters in versions up to, and including, 7.0 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00585 Published 2022-12-15 No fix listed CWE-79
TI-2022-02096 CVE-2022-2271 · GHSA-x44q-mwr9-fc57

WP Database Backup < 5.9 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The WP Database Backup WordPress plugin before 5.9 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capabi…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00518 Published 2022-09-05 Fixed in 5.9 CWE-79