CVE-2011-4342: Backwpup

High severity, CVSS 7.5. EPSS: 10.7% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in wp_xml_export.php in the BackWPup plugin before 1.7.2 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpabs parameter.

Affected products

• Backwpup Backwpup: up to and including 1.7.1

Published 2012-10-08. Last modified 2026-06-16.