WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in BackWPup – WordPress Backup & Restore Plugin

Back up, restore, and protect your WordPress website with automated backups, cloud storage, one-click recovery, and AI-assisted backup management.

12Reported vulnerabilities
9.8Highest CVSS score
5.7.5Latest version
400,000+Active installs

What to do now

Update BackWPup – WordPress Backup & Restore Plugin to 5.7.5 or later. 12 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 21, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2011-4342 Critical 9.8 10.7% 1.7.1 and earlier 1.7.2 March 28, 2011
CVE-2023-7164 High 7.5 2.3% Before 4.0.4 4.0.4 April 8, 2024
CVE-2017-2551 High 7.5 1.7% 3.4.1 and earlier 3.4.2 September 28, 2017
CVE-2013-4626 Medium 4.3 2.1% Before 3.0.13 3.0.13 September 26, 2013
CVE-2023-5504 High 8.7 0.9% 4.0.1 and earlier 4.0.2 January 11, 2024
CVE-2011-5208 High 7.5 3.3% Before 1.4.1 1.4.1 March 2, 2011
CVE-2026-6227 High 7.2 1.3% 0 to 5.6.6 (inclusive) 5.6.7 April 14, 2026
CVE-2025-15041 High 7.2 0.4% 5.6.2 and earlier 5.6.3 February 19, 2026
CVE-2026-65443 High 7.2 0.1% 5.7.4 and earlier 5.7.5 July 27, 2026
CVE-2023-5505 Medium 6.8 1.0% Before 4.0.2 4.0.2 August 17, 2024
CVE-2025-10579 Medium 5.3 0.3% 5 to 5.5.0 (inclusive) 5.5.1 October 24, 2025
CVE-2023-5775 Low 2.7 0.4% Before 4.0.3 4.0.3 February 26, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.