Multiple directory traversal vulnerabilities in the BackWPup plugin before 1.4.1 for WordPress allow remote attackers to read arbitrary files via a .. (dot dot) in the wpabs parameter to (1) app/options-view_log-iframe.php or (2) app/options-runnow-iframe.php.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Backwpup Plugin | — | Update backwpup plugin to version 1.4.1, or a newer patched version | May 15, 2025 | Mar 2, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub