Missing Authorization in DB Backup Plugin by Syed Amir Hussain

CVE-2025-50031

What is CVE-2025-50031?

The DB Backup plugin by Syed Amir Hussain suffers from a missing authorization vulnerability that allows unauthorized users to exploit incorrectly configured access control security levels. This lack of proper authorization can lead to unauthorized access to sensitive data and functions within the plugin, posing a significant risk to WordPress sites using affected versions. The vulnerability impacts all versions from n/a through 6.0, making it crucial for users to review their configurations and patch their applications to ensure continued security.

References