Cross-Site Scripting Vulnerability in BackWPup Plugin for WordPress
CVE-2013-4626

Currently unrated

Key Information:

Vendor: Wordpress
Status: BackWPup Plugin
Vendor: CVE Published:; 26 September 2013

What is CVE-2013-4626?

The BackWPup plugin for WordPress is susceptible to a Cross-Site Scripting (XSS) vulnerability prior to version 3.0.13. This vulnerability allows remote attackers to inject arbitrary web scripts or HTML into the application via the 'tab' parameter on the wp-admin/admin.php page. This exploit can lead to unauthorized actions performed on behalf of users, potentially compromising the security of the affected WordPress sites.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch