CVE-2022-31474: Ithemes Backupbuddy

High severity, CVSS 7.5. EPSS: 63.8% chance of exploitation in the next 30 days.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in iThemes BackupBuddy allows Path Traversal.This issue affects BackupBuddy: from 8.5.8.0 through 8.7.4.1.

Affected products

• Ithemes Backupbuddy: from 8.5.8.0, before 8.7.5.0 (fixed in 8.7.5.0)

Published 2023-03-13. Last modified 2026-06-17.