CVE-2014-10076: Wp-DB-Backup Project Wp-DB-Backup

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

The wp-db-backup plugin 2.2.4 for WordPress relies on a five-character string for access control, which makes it easier for remote attackers to read backup archives via a brute-force attack.

Affected products

• Wp-DB-Backup Project Wp-DB-Backup: version 2.2.4 only

Published 2018-10-05. Last modified 2026-06-17.