CVE-2024-0842

The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 1.2.6. This is due to direct access of the backuply/restore_ins.php file and. This makes it possible for unauthenticated attackers to make excessive requests that result in the server running out of resources.

• CWE-400
• CWE-834

• https://plugins.trac.wordpress.org/changeset/3033242/backuply/trunk/restore_ins.phpPatch
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3036756%40backuply&new=3036756%40backuply&sfp_email=&sfph_mail=
• https://www.wordfence.com/threat-intel/vulnerabilities/id/1f955d88-ab4c-4cf4-a23b-91119d412716?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/changeset/3033242/backuply/trunk/restore_ins.phpPatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/1f955d88-ab4c-4cf4-a23b-91119d412716?source=cveThird Party Advisory

Published

Feb 9, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0836The WordPress Review & Structure Data Schema Plugin – Review…4.3
• CVE-2024-0837The Element Pack Elementor Addons (Header Footer, Free Templ…5.4
• CVE-2024-0838The Happy Addons for Elementor plugin for WordPress is vulne…5.4
• CVE-2024-0839The FeedWordPress plugin for WordPress is vulnerable to Inse…5.3
• CVE-2024-0840The Grandstream UCM Series IP PBX before firmware version 1.…8.8
• CVE-2024-0841A null pointer dereference flaw was found in the hugetlbfs_f…7.8
• CVE-2024-0844The Popup More Popups, Lightboxes, and more popup modules pl…7.2
• CVE-2024-0845The PDF Viewer for Elementor plugin for WordPress is vulnera…5.4
• CVE-2024-0847The 5280 Bootstrap Modal Contact Form plugin for WordPress i…4.3
• CVE-2024-0848The AA Cash Calculator plugin for WordPress is vulnerable to…6.1
• CVE-2024-0849Leanote version 2.7.0 allows obtaining arbitrary local files…5
• CVE-2024-0851Improper Neutralization of Special Elements used in an SQL C…10