![WordPress Backup Plugin DoS Vulnerability Affects +200,000 Sites WordPress Backup Plugin DoS Vulnerability Affects +200,000 Sites](https://www.searchenginejournal.com/wp-content/uploads/2024/02/backuply-wordpress-plugin-65ca8033ae233-sej.jpg)
A popular WordPress backup plugin installed in over 200,000 websites recently patched a high severity vulnerability that could lead to a denial of service attack. Wordfence assigned a CVSS severity level rating of High, with a score of 7.5/10, indicating that plugin users should take note and update their plugin.
Backuply Plugin
The vulnerability affects the Backuply WordPress backup plugin. Creating backups is a necessary function for every website, not just WordPress sites, because backups help publishers roll back to a previous version should the server fail and lose data in a catastrophic failure.
Website backups are invaluable for site migrations, hacking recovery and failed updates that render a website non-functional.
Backuply is an especially useful plugin because it backup data to multiple trusted third party cloud services and supports multiple ways to download local copies in order to create redundant backups so that if a cloud backup is bad the site can be recovered from another backup stored locally.
According to Backuply:
“Backuply comes with Local Backups and Secure Cloud backups with easy integrations with FTP, FTPS, SFTP, WebDAV, Google Drive, Microsoft OneDrive, Dropbox, Amazon S3 and easy One-click restoration.”
Vulnerability Affecting Backuply
The United States Government National Vulnerability Database warns that Backuply up to and including version 1.2.5 contains a flaw that can lead to denial of service attacks.
The warning explains:
“This is due to direct access of the backuply/restore_ins.php file and. This makes it possible for unauthenticated attackers to make excessive requests that result in the server running out of resources.”