CVE-2007-5800

no score yetEPSS 37%

tom willmot backupwordpress plugin: no CVSS score yet. EPSS 37% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in the BackUpWordPress 0.4.2b and earlier plugin for WordPress allow remote attackers to execute arbitrary PHP code via a URL in the bkpwp_plugin_path parameter to (1) plugins/BackUp/Archive.php; and (2) Predicate.php, (3) Writer.php, (4) Reader.php, and other unspecified scripts under plugins/BackUp/Archive/.

EPSS: 37% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2007-11-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

tom_willmot:backupwordpress_plugin

References

http://osvdb.org/38476
http://osvdb.org/38477
http://osvdb.org/38478
http://osvdb.org/38479
http://wordpress.designpraxis.at/2007/11/01/backupwordpress-security-release/

Check your stack JSON