CVE-2022-4931

The BackupWordPress plugin for WordPress is vulnerable to information disclosure in versions up to, and including 3.12. This is due to missing authorization on the heartbeat_received() function that triggers on WordPress heartbeat. This makes it possible for authenticated attackers, with subscriber-level permissions and above to retrieve back-up paths that can subsequently be used to download the back-up.

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2683799%40backupwordpress&new=2683799%40backupwordpress&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/747c86f4-118b-4a9c-899c-e9067d2c7a02Third Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2683799%40backupwordpress&new=2683799%40backupwordpress&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/747c86f4-118b-4a9c-899c-e9067d2c7a02Third Party Advisory

Published

Mar 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-49304In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49305In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49306In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49307In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49308In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49309In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49310In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49311In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49312In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49313In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49314In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49315In the Linux kernel, the following vulnerability has been re…5.5