CVE-2024-0842: Softaculous Backuply

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 1.2.6. This is due to direct access of the backuply/restore_ins.php file and. This makes it possible for unauthenticated attackers to make excessive requests that result in the server running out of resources.

Affected products

• Softaculous Backuply: before 1.2.6 (fixed in 1.2.6)

Published 2024-02-09. Last modified 2026-06-17.