WordPress plugin
Backup Scheduler security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium1
- Low0
All Backup Scheduler vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Cross-Site Request Forgery ≤1.5.13No patch available | CVE-2022-38079 | |
| Medium6.3 | Missing Authorization to Sensitive Information Disclosure ≤1.5.13No patch available | — |
- High8.8Cross-Site Request Forgery
≤1.5.13No patch available
- Medium6.3Missing Authorization to Sensitive Information Disclosure
≤1.5.13No patch available
Backup Scheduler: common questions
Does Backup Scheduler have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Backup Scheduler: 1 high, 1 medium. At least one is not fixed in the latest version.
How do I check which version of Backup Scheduler I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Backup Scheduler vulnerability?
CVE-2022-38079, published Sep 23, 2022: Backup Scheduler <= 1.5.13 - Cross-Site Request Forgery. Severity: High (CVSS 8.8).
Is any Backup Scheduler vulnerability listed in CISA KEV?
No. None of the known Backup Scheduler vulnerabilities is currently listed in the CISA KEV catalog.