CVE-2023-5504

The BackWPup plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.0.1 via the Log File Folder. This allows authenticated attackers to store backups in arbitrary folders on the server provided they can be written to by the server. Additionally, default settings will place an index.php and a .htaccess file into the chosen directory (unless already present) when the first backup job is run that are intended to prevent directory listing and file access. This means that an attacker could set the backup directory to the root of another site in a shared environment and thus disable that site.

• CWE-22
• CWE-22

• https://plugins.trac.wordpress.org/browser/backwpup/trunk/inc/class-page-settings.php?rev=2818974#L457Issue Tracking
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3000176%40backwpup%2Ftrunk&old=2980789%40backwpup%2Ftrunk&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/e830fe1e-1171-46da-8ee7-0a6654153f18?source=cveProduct, Third Party Advisory
• https://plugins.trac.wordpress.org/browser/backwpup/trunk/inc/class-page-settings.php?rev=2818974#L457Issue Tracking
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3000176%40backwpup%2Ftrunk&old=2980789%40backwpup%2Ftrunk&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/e830fe1e-1171-46da-8ee7-0a6654153f18?source=cveProduct, Third Party Advisory

Published

Jan 11, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-5496A vulnerability was found in Translator PoqDev Add-On 1.0.11…5.4
• CVE-2023-5497A vulnerability classified as critical has been found in Ton…8.8
• CVE-2023-5498Cross-Site Request Forgery (CSRF) in GitHub repository chief…4.3
• CVE-2023-5499Information exposure vulnerability in Shenzhen Reachfar v28,…7.5
• CVE-2023-5500This vulnerability allows an remote attacker with low privil…8.8
• CVE-2023-5502On affected platforms running Arista EOS with 802.1x authent…8.2
• CVE-2023-5505The BackWPup plugin for WordPress is vulnerable to Directory…6.8
• CVE-2023-5506The ImageMapper plugin for WordPress is vulnerable to unauth…4.3
• CVE-2023-5507The ImageMapper plugin for WordPress is vulnerable to Stored…5.4
• CVE-2023-5508Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-5509The myStickymenu WordPress plugin before 2.6.5 does not adeq…5.4
• CVE-2023-5510Rejected reason: This CVE ID has been rejected or withdrawn …