WP Media BackWPup – WordPress Backup & Restore Plugin

• CVE-2026-6227 High 7.2 BackWPup <= 5.6.6 - Authenticated (Administrator+) Local File Inclusion via 'block_name' Parameter 1.3%
• CVE-2025-15041 High 7.2 BackWPup <= 5.6.2 - Authenticated (BackWPup Helper+) Privilege Escalation via Arbitrary Options Update 0.4%
• CVE-2025-10579 Medium 5.3 BackWPup <= 5.5.0 - Missing Authorization to Sensitive Information Exposure 0.3%
• CVE-2023-5505 Medium 6.8 BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal 1.0%
• CVE-2023-5775 Low 2.2 BackWPup <= 4.0.2 - Plaintext Storage of Backup Destination Password 0.4%
• CVE-2023-5504 High 8.7 BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal 0.9%