Radar sectionsPlugins & themes
Check my site

WordPress plugin

BackWPup – WordPress Backup & Restore Plugin security & vulnerabilities

backwpup— active installsLast vulnerability Oct 8, 2026

No known unpatched vulnerabilities in the latest version

All 16 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

16Known vulnerabilities
  • Critical1
  • High7
  • Medium7
  • Low1
Vulnerabilities per year
2011: 2 vulnerabilities2112013: 1 vulnerability1132017: 1 vulnerability1172023: 2 vulnerabilities2232024: 2 vulnerabilities2242025: 1 vulnerability1252026: 7 vulnerabilities726

All BackWPup – WordPress Backup & Restore Plugin vulnerabilities

Nothing in this view

No vulnerabilities match this filter. Show all.

BackWPup – WordPress Backup & Restore Plugin: common questions

Does BackWPup – WordPress Backup & Restore Plugin have known vulnerabilities?

Yes. VulnCrest Radar lists 16 known vulnerabilities in BackWPup – WordPress Backup & Restore Plugin: 1 critical, 7 high, 7 medium, 1 low. None are known to affect version null.

How do I check which version of BackWPup – WordPress Backup & Restore Plugin I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent BackWPup – WordPress Backup & Restore Plugin vulnerability?

CVE-2026-86826, published Oct 8, 2026: BackWPup – WordPress Backup & Restore Plugin < 5.7.7 - Unauthenticated Information Exposure. Severity: Medium (CVSS 5.3).

Is any BackWPup – WordPress Backup & Restore Plugin vulnerability listed in CISA KEV?

No. None of the known BackWPup – WordPress Backup & Restore Plugin vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Are you sure?