Vulnerabilities in wp_media
7 resultsCVE-2026-6227HIGHBackWPup <= 5.6.6 - Authenticated (Administrator+) Local File Inclusion via 'block_name' ParameterEPSS 1.3%CVE-2023-5505MEDIUMBackWPup <= 4.0.1 - Authenticated (Administrator+) Directory TraversalEPSS 1.0%CVE-2023-5504HIGHBackWPup <= 4.0.1 - Authenticated (Administrator+) Directory TraversalEPSS 0.9%CVE-2023-5775LOWBackWPup <= 4.0.2 - Plaintext Storage of Backup Destination PasswordEPSS 0.4%CVE-2025-15041HIGHBackWPup <= 5.6.2 - Authenticated (BackWPup Helper+) Privilege Escalation via Arbitrary Options UpdateEPSS 0.4%CVE-2026-100196HIGHLazyLoad Plugin <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via Comment ContentEPSS 0.3%CVE-2025-10579MEDIUMBackWPup <= 5.5.0 - Missing Authorization to Sensitive Information ExposureEPSS 0.3%