Approved changes feed: RSS · Atom

cpe:2.3:a:chrishurst:simple_backup:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorChrishurst (b2afe861-61a2-561a-acc9-6d055311505a)
ProductSimple Backup (d5a1919b-0e40-5ec8-b62b-4b63844c8868)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-20076 vulnerable 2026-07-28 18:32:21.572218 WordPress Simple-Backup 2.7.11 Arbitrary File Deletion and Download
HIGH (7.5)
WordPress Simple-Backup 2.7.11 contains multiple vulnerabilities that allow unauthenticated attackers to delete arbitrary files and download sensitive files by manipulating the delete_backup_file and download_backup_file parameters in tools.php. Attackers can exploit insufficient input validation using directory traversal techniques to access wp-config.php, database dumps, and other sensitive files, or delete critical files .htaccess to expose backup directories.
Published: 2026-06-15T12:00:44.372Z
Updated: 2026-06-15T14:50:06.600Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.