Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

wp-plugins/backupwordpress

              master @ 7a397a4
            

Fixes

CVEs

CRITICAL

Peak severity

70.0%

Coverage

Highlights

Auth Bypass: 4 prior fixes. Scrutinize any change in this area.

admin/actions.php: most-fixed (6 issues). Treat as high-risk during review.

7 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Cross-Site Request Forgery (CSRF): Critical backup operations, including deleting backups, deleting schedules, and executing manual runs, were historically exposed to unauthorized execution because they lacked robust anti-CSRF token verification. Developers must validate requests using strict nonce checks.

Auth Bypass: Sensitive dashboard information and backup download actions were accessible without robust authorization checks. Validating user capabilities via current_user_can and enforcing cryptographic keys for downloads are mandatory to prevent unauthorized data access.

Remote Code Execution: The integration of the legacy Sajax library allowed arbitrary function execution via unvalidated client-side requests using call_user_func_array. The entire component had to be removed to eliminate this structural risk.