Unknown BackWPup

• CVE-2026-86828 Medium 6.6 BackWPup < 5.7.7 - Admin+ Path Traversal to RCE via Restore PclZip Fallback 0.4%
• CVE-2026-86827 Medium 5.3 BackWPup 3.3 - 5.7.6 - Unauthenticated Backup Job Execution via wp-cron.php 0.2%
• CVE-2026-86826 Medium 5.9 BackWPup < 5.7.7 - Unauthenticated Sensitive Data Disclosure via Restore Working Directory on NGINX 0.2%
• CVE-2026-86815 Medium 5.5 BackWPup 5.2.2 - 5.7.4 - BackWPup Jobs Checker+ Database Backup Exfiltration via Missing Authorization on Job REST Routes 0.4%
• CVE-2023-7164 High 7.5 BackWPup < 4.0.4 - Unauthenticated Backup Download 2.2%