WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in WP Database Backup – Unlimited Database & Files Backup by Backup for WP

Create & Restore Database Backup easily on single click. Manual or automated backups (backup to Dropbox, Google drive, Amazon s3,FTP,Email).

14Reported vulnerabilities
9.8Highest CVSS score
7.12Latest version
30,000+Active installs

What to do now

Update WP Database Backup – Unlimited Database & Files Backup by Backup for WP to 7.12 or later. 14 of these have a fixed version available. Updating resolves them.

Plugin last updated: June 16, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2019-25224 Critical 9.8 16.7% Before 5.2 5.2 July 25, 2025
CVE-2020-7241 High 7.5 2.4% 5.5 and earlier 5.5.1 January 20, 2020
WF-f8035ed9-d267-44da-9de4-cf3d6ece7059 Critical 9.8 — 5.1.2 and earlier 5.1.3 March 24, 2019
CVE-2016-10876 High 8.8 0.7% Before 4.3.1 4.3.1 August 12, 2019
CVE-2016-10874 High 8.8 0.7% Before 4.3.3 4.3.3 August 12, 2019
WF-76f9d37e-1339-4267-aaf6-38a591e97fa2 High 8.8 — Before 4.3.6 4.3.6 October 21, 2016
CVE-2026-9834 High 7.2 2.7% 0 to 7.11 (inclusive) 7.12 July 2, 2026
CVE-2024-12330 High 7.5 0.5% 7.3 and earlier 7.4 January 8, 2025
CVE-2019-14949 Medium 6.1 0.9% Before 5.1.2 5.1.2 August 12, 2019
CVE-2016-10875 Medium 6.1 0.9% Before 4.3.1 4.3.1 August 12, 2019
CVE-2016-10873 Medium 6.1 0.9% Before 4.3.3 4.3.3 August 12, 2019
WF-1a684ca7-0856-418e-9229-3e74dafb5c89 Medium 6.4 — Before 3.4 3.4 August 20, 2015
WF-31496229-bf54-466c-a87b-cc32e65500a4 Medium 5.5 — 5.8 and earlier 5.9 August 9, 2022
CVE-2022-2271 Medium 4.8 0.5% Before 5.9 5.9 September 5, 2022

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.