wp_backitup_community_edition vulnerabilities

CVEs whose affected-version data names the wp_backitup_community_edition package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-18386Medium· 4.9

2w ago

WP BackItUp Community Edition <= 2.1.0 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'backup_file' Parameter

The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.0 via the 'backup_file' parameter parameter. This makes it possible for authenticated attackers, with a…

▾ Sunlitcssimmon · WP BackItUp Community EditionEPSS 0.73%via CVEORG