EIP-2026-114207

PRE-CVE

WordPress Plugin WP BackupPlus - Database and Files Backup Download

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-114207. PoCs published by pSyCh0_3D.

AI-analyzed exploit summary This exploit demonstrates an information disclosure vulnerability in WordPress wpbackupplus plugin, allowing unauthenticated access to backup files and database dumps via predictable paths. The PoC provides direct URLs to download sensitive backup data.

Description

WordPress Plugin WP BackupPlus - Database and Files Backup Download

Exploits (1)

exploitdb WORKING POC VERIFIED
by pSyCh0_3D · textwebappsphp
https://www.exploit-db.com/exploits/34124

This exploit demonstrates an information disclosure vulnerability in WordPress wpbackupplus plugin, allowing unauthenticated access to backup files and database dumps via predictable paths. The PoC provides direct URLs to download sensitive backup data.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: WordPress wpbackupplus plugin
No auth needed
Prerequisites: WordPress site with wpbackupplus plugin installed · Backup files generated by the plugin
mistral-large-3 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026