CVE-2024-0697: Softaculous Backuply

Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days.

The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.3 via the node_id parameter in the backuply_get_jstree function. This makes it possible for attackers with administrator privileges or higher to read the contents of arbitrary files on the server, which can contain sensitive information.

Affected products

• Softaculous Backuply: up to and including 1.2.3

Published 2024-01-27. Last modified 2026-06-17.