https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-08T18:23:15.562756+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-86828 fkie_cve-2026-86828 2026-10-08T18:23:15.594230+00:00

The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a backup restore when its fallback archive library is used, allowing high-privileged users to write files outside the intended restore directory, potentially leading to remote code execution.

 https://vulnerability.circl.lu/vuln/ghsa-5547-r7f3-wccc GHSA-5547-r7f3-wccc 2026-10-08T18:23:15.594300+00:00

The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a backup restore when its fallback archive library is used, allowing high-privileged users to write files outside the intended restore directory, potentially leading to remote code execution.