CVE-2023-7164: BackWPup < 4.0.4 - Unauthenticated Backup Download

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-04-08 · updated 2026-06-17

Description

The BackWPup WordPress plugin before 4.0.4 does not prevent Directory Listing in its temporary backup folder, allowing unauthenticated attackers to download backups of a site's database.

Affected products

wp_media BackWPup – WordPress Backup & Restore Plugin: before 4.0.4 — fixed in 4.0.4

How to fix

Upgrade to a fixed version: wp_media BackWPup – WordPress Backup & Restore Plugin 4.0.4. Check the vendor advisory for mitigations.

References

https://wpscan.com/vulnerability/79b07f37-2c6b-4846-bb28-91a1e5bf112e/
https://wpscan.com/vulnerability/79b07f37-2c6b-4846-bb28-91a1e5bf112e/

Get alerted when CVE-2023-7164 or the next vulnerability affects your stack