vulnerability
WordPress Plugin: wp-database-backup: CVE-2019-25224: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 10 | (AV:N/AC:L/Au:N/C:C/I:C/A:C) | Apr 24, 2019 | Jul 25, 2025 | Jul 28, 2025 |
Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Apr 24, 2019
Added
Jul 25, 2025
Modified
Jul 28, 2025
Description
The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldump function. This vulnerability allows unauthenticated attackers to execute arbitrary commands on the host operating system.
Solution
wp-database-backup-plugin-cve-2019-25224
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.