{"id":80480,"date":"2025-02-10T20:09:23","date_gmt":"2025-02-10T20:09:23","guid":{"rendered":"https:\/\/peraltafinancing.com\/business\/internet-business\/backup-buddy-vulnerability\/"},"modified":"2025-02-10T20:09:23","modified_gmt":"2025-02-10T20:09:23","slug":"backup-buddy-vulnerability","status":"publish","type":"post","link":"https:\/\/fivemor.com\/?p=80480","title":{"rendered":"Backup Buddy Vulnerability"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div id=\"post-9182\">\n<header>\n<!--\n\n<div class=\"blogmeta\">\n    <span itemprop=\"publisher\" itemscope itemtype=\"http:\/\/schema.org\/Organization\">\n                <meta itemprop=\"name\" content=\"Easyspace\" \/>\n        \n\n<div itemprop=\"logo\" itemscope itemtype=\"https:\/\/schema.org\/ImageObject\">\n      <meta itemprop=\"url\" content=\"https:\/\/pbs.twimg.com\/profile_images\/900648899236552704\/hmN3a9jY_400x400.jpg\">\n      <meta itemprop=\"width\" content=\"40\">\n      <meta itemprop=\"height\" content=\"40\">\n    <\/div>\n\n\n\n    <\/span>\n    <img alt=\"\" src=\"https:\/\/secure.gravatar.com\/avatar\/bd584b2a228076f65a5a33a8faf145cf?s=128&r=pg\" srcset=\"https:\/\/secure.gravatar.com\/avatar\/bd584b2a228076f65a5a33a8faf145cf?s=256&r=pg 2x\" class=\"avatar avatar-128 photo\" height=\"128\" width=\"128\" loading='lazy' decoding='async'\/>    <span class=\"author vcard\" itemprop=\"uthor\" itemscope itemtype=\"http:\/\/schema.org\/Person\"><span itemprop=\"name\"><a href=\"https:\/\/www.easyspace.com\/blog\/author\/easyspace\/\" title=\"Posts by Easyspace\" rel=\"author\">Easyspace<\/a><\/span><\/span>\n    <span class=\"meta-sep\"> | <\/span>\n    <span class=\"entry-date\" itemprop=\"datePublished\">September 12, 2022<\/span>\n<\/div>\n\n--><\/header>\n<div itemprop=\"articleBody\">\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.easyspace.com\/blog\/wp-content\/uploads\/2022\/09\/backup_buddy.png\"><img decoding=\"async\" fetchpriority=\"high\" width=\"640\" height=\"260\" src=\"https:\/\/www.easyspace.com\/blog\/wp-content\/uploads\/2022\/09\/backup_buddy.png\" alt=\"\" class=\"wp-image-9184\" srcset=\"https:\/\/www.easyspace.com\/blog\/wp-content\/uploads\/2022\/09\/backup_buddy.png 640w, https:\/\/www.easyspace.com\/blog\/wp-content\/uploads\/2022\/09\/backup_buddy-300x122.png 300w\" sizes=\"(max-width: 640px) 100vw, 640px\"\/><\/a><\/figure>\n<p>A zero-day flaw in a WordPress plugin called BackupBuddy is being actively exploited, WordPress security company Wordfence has disclosed.<\/p>\n<p>\u201cThis vulnerability makes it possible for unauthenticated users to download arbitrary files from the affected site which can include sensitive information,\u201d it said.<\/p>\n<p>The vulnerability affects versions 8.5.8.0 to 8.7.4.1,<\/p>\n<p>The BackupBuddy plugin for WordPress is designed to make back-up management easy for WordPress site owners.<\/p>\n<p>One of the features in the plugin is to store back-up files in multiple different locations, known as Destinations, which include Google Drive, OneDrive, and AWS for example.<\/p>\n<p>There is also the ability to store back-up downloads locally via the \u2018Local Directory Copy\u2019 option. Unfortunately,<\/p>\n<p>the method to download these locally stored files was insecurely implemented making it possible for unauthenticated users to download any file stored on the server.<\/p>\n<p>More specifically the plugin registers an admin_init hook for the function intended to download local back-up files and the function itself did not have any capability checks nor any nonce validation.<\/p>\n<p>This means that the function could be triggered via any administrative page, including those that can be called without authentication (admin-post.php), making it possible for unauthenticated users to call the function.<\/p>\n<p>The back-up path is not validated and therefore an arbitrary file could be supplied and subsequently downloaded.<\/p>\n<p>We strongly encourage you to ensure your site has been updated to the latest patched version 8.7.5 which iThemes has made available to all site owners running a vulnerable version regardless of licensing status<\/p>\n<p><!-- AddThis Advanced Settings above via filter on the_content --><!-- AddThis Advanced Settings below via filter on the_content --><!-- AddThis Advanced Settings generic via filter on the_content --><!-- AddThis Share Buttons above via filter on the_content --><!-- AddThis Share Buttons below via filter on the_content --><!-- AddThis Share Buttons generic via filter on the_content -->          <span itemprop=\"headline\"\/>\n<\/div>\n<\/p><\/div>\n\n","protected":false},"excerpt":{"rendered":"<p>A zero-day flaw in a WordPress plugin called BackupBuddy is being actively exploited, WordPress security company Wordfence has disclosed. \u201cThis vulnerability makes it possible for unauthenticated users to download arbitrary files from the affected site which can include sensitive information,\u201d it said. The vulnerability affects versions 8.5.8.0 to 8.7.4.1, The BackupBuddy plugin for WordPress is [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":33485,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[95],"tags":[17637,22604,19586],"dealstore":[],"offerexpiration":[],"class_list":["post-80480","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-internet-business","tag-backup","tag-buddy","tag-vulnerability"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Backup Buddy Vulnerability - Som2ny Network<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fivemor.com\/?p=80480\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Backup Buddy Vulnerability - Som2ny Network\" \/>\n<meta property=\"og:description\" content=\"A zero-day flaw in a WordPress plugin called BackupBuddy is being actively exploited, WordPress security company Wordfence has disclosed. \u201cThis vulnerability makes it possible for unauthenticated users to download arbitrary files from the affected site which can include sensitive information,\u201d it said. The vulnerability affects versions 8.5.8.0 to 8.7.4.1, The BackupBuddy plugin for WordPress is [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fivemor.com\/?p=80480\" \/>\n<meta property=\"og:site_name\" content=\"Som2ny Network\" \/>\n<meta property=\"article:published_time\" content=\"2025-02-10T20:09:23+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/01\/bd584b2a228076f65a5a33a8faf145cf.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"128\" \/>\n\t<meta property=\"og:image:height\" content=\"128\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fivemor.com\/?p=80480#article\",\"isPartOf\":{\"@id\":\"https:\/\/fivemor.com\/?p=80480\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\/\/fivemor.com\/#\/schema\/person\/b85e3c3dc0e1daea076524dc8810c371\"},\"headline\":\"Backup Buddy Vulnerability\",\"datePublished\":\"2025-02-10T20:09:23+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fivemor.com\/?p=80480\"},\"wordCount\":252,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fivemor.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/fivemor.com\/?p=80480#primaryimage\"},\"thumbnailUrl\":\"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/01\/bd584b2a228076f65a5a33a8faf145cf.jpeg\",\"keywords\":[\"backup\",\"Buddy\",\"Vulnerability\"],\"articleSection\":[\"Internet Business\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fivemor.com\/?p=80480#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fivemor.com\/?p=80480\",\"url\":\"https:\/\/fivemor.com\/?p=80480\",\"name\":\"Backup Buddy Vulnerability - Som2ny Network\",\"isPartOf\":{\"@id\":\"https:\/\/fivemor.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/fivemor.com\/?p=80480#primaryimage\"},\"image\":{\"@id\":\"https:\/\/fivemor.com\/?p=80480#primaryimage\"},\"thumbnailUrl\":\"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/01\/bd584b2a228076f65a5a33a8faf145cf.jpeg\",\"datePublished\":\"2025-02-10T20:09:23+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fivemor.com\/?p=80480#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fivemor.com\/?p=80480\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/fivemor.com\/?p=80480#primaryimage\",\"url\":\"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/01\/bd584b2a228076f65a5a33a8faf145cf.jpeg\",\"contentUrl\":\"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/01\/bd584b2a228076f65a5a33a8faf145cf.jpeg\",\"width\":128,\"height\":128},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fivemor.com\/?p=80480#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/fivemor.com\/?bp_activities=1\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Backup Buddy Vulnerability\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fivemor.com\/#website\",\"url\":\"https:\/\/fivemor.com\/\",\"name\":\"Som2ny Network\",\"description\":\"Daily Deals\",\"publisher\":{\"@id\":\"https:\/\/fivemor.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fivemor.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/fivemor.com\/#organization\",\"name\":\"Som2ny Network\",\"url\":\"https:\/\/fivemor.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/fivemor.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/fivemor.com\/wp-content\/uploads\/2026\/07\/4a0953c4-logo-300x86-1.png\",\"contentUrl\":\"https:\/\/fivemor.com\/wp-content\/uploads\/2026\/07\/4a0953c4-logo-300x86-1.png\",\"width\":300,\"height\":86,\"caption\":\"Som2ny Network\"},\"image\":{\"@id\":\"https:\/\/fivemor.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/fivemor.com\/#\/schema\/person\/b85e3c3dc0e1daea076524dc8810c371\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/fivemor.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/729ae85bf62b9917e93538db2f2688ca?s=96&r=g&default=https%3A%2F%2Ffivemor.com%2Fwp-content%2Fplugins%2Fbuddypress-first-letter-avatar%2Fimages%2Fdefault%2F96%2Flatin_a.png\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/729ae85bf62b9917e93538db2f2688ca?s=96&r=g&default=https%3A%2F%2Ffivemor.com%2Fwp-content%2Fplugins%2Fbuddypress-first-letter-avatar%2Fimages%2Fdefault%2F96%2Flatin_a.png\",\"caption\":\"admin\"},\"sameAs\":[\"https:\/\/fivemor.com\"],\"url\":\"https:\/\/fivemor.com\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Backup Buddy Vulnerability - Som2ny Network","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fivemor.com\/?p=80480","og_locale":"en_US","og_type":"article","og_title":"Backup Buddy Vulnerability - Som2ny Network","og_description":"A zero-day flaw in a WordPress plugin called BackupBuddy is being actively exploited, WordPress security company Wordfence has disclosed. \u201cThis vulnerability makes it possible for unauthenticated users to download arbitrary files from the affected site which can include sensitive information,\u201d it said. The vulnerability affects versions 8.5.8.0 to 8.7.4.1, The BackupBuddy plugin for WordPress is [&hellip;]","og_url":"https:\/\/fivemor.com\/?p=80480","og_site_name":"Som2ny Network","article_published_time":"2025-02-10T20:09:23+00:00","og_image":[{"width":128,"height":128,"url":"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/01\/bd584b2a228076f65a5a33a8faf145cf.jpeg","type":"image\/jpeg"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fivemor.com\/?p=80480#article","isPartOf":{"@id":"https:\/\/fivemor.com\/?p=80480"},"author":{"name":"admin","@id":"https:\/\/fivemor.com\/#\/schema\/person\/b85e3c3dc0e1daea076524dc8810c371"},"headline":"Backup Buddy Vulnerability","datePublished":"2025-02-10T20:09:23+00:00","mainEntityOfPage":{"@id":"https:\/\/fivemor.com\/?p=80480"},"wordCount":252,"commentCount":0,"publisher":{"@id":"https:\/\/fivemor.com\/#organization"},"image":{"@id":"https:\/\/fivemor.com\/?p=80480#primaryimage"},"thumbnailUrl":"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/01\/bd584b2a228076f65a5a33a8faf145cf.jpeg","keywords":["backup","Buddy","Vulnerability"],"articleSection":["Internet Business"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fivemor.com\/?p=80480#respond"]}]},{"@type":"WebPage","@id":"https:\/\/fivemor.com\/?p=80480","url":"https:\/\/fivemor.com\/?p=80480","name":"Backup Buddy Vulnerability - Som2ny Network","isPartOf":{"@id":"https:\/\/fivemor.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/fivemor.com\/?p=80480#primaryimage"},"image":{"@id":"https:\/\/fivemor.com\/?p=80480#primaryimage"},"thumbnailUrl":"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/01\/bd584b2a228076f65a5a33a8faf145cf.jpeg","datePublished":"2025-02-10T20:09:23+00:00","breadcrumb":{"@id":"https:\/\/fivemor.com\/?p=80480#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fivemor.com\/?p=80480"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/fivemor.com\/?p=80480#primaryimage","url":"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/01\/bd584b2a228076f65a5a33a8faf145cf.jpeg","contentUrl":"https:\/\/fivemor.com\/wp-content\/uploads\/2025\/01\/bd584b2a228076f65a5a33a8faf145cf.jpeg","width":128,"height":128},{"@type":"BreadcrumbList","@id":"https:\/\/fivemor.com\/?p=80480#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/fivemor.com\/?bp_activities=1"},{"@type":"ListItem","position":2,"name":"Backup Buddy Vulnerability"}]},{"@type":"WebSite","@id":"https:\/\/fivemor.com\/#website","url":"https:\/\/fivemor.com\/","name":"Som2ny Network","description":"Daily Deals","publisher":{"@id":"https:\/\/fivemor.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fivemor.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/fivemor.com\/#organization","name":"Som2ny Network","url":"https:\/\/fivemor.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/fivemor.com\/#\/schema\/logo\/image\/","url":"https:\/\/fivemor.com\/wp-content\/uploads\/2026\/07\/4a0953c4-logo-300x86-1.png","contentUrl":"https:\/\/fivemor.com\/wp-content\/uploads\/2026\/07\/4a0953c4-logo-300x86-1.png","width":300,"height":86,"caption":"Som2ny Network"},"image":{"@id":"https:\/\/fivemor.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/fivemor.com\/#\/schema\/person\/b85e3c3dc0e1daea076524dc8810c371","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/fivemor.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/729ae85bf62b9917e93538db2f2688ca?s=96&r=g&default=https%3A%2F%2Ffivemor.com%2Fwp-content%2Fplugins%2Fbuddypress-first-letter-avatar%2Fimages%2Fdefault%2F96%2Flatin_a.png","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/729ae85bf62b9917e93538db2f2688ca?s=96&r=g&default=https%3A%2F%2Ffivemor.com%2Fwp-content%2Fplugins%2Fbuddypress-first-letter-avatar%2Fimages%2Fdefault%2F96%2Flatin_a.png","caption":"admin"},"sameAs":["https:\/\/fivemor.com"],"url":"https:\/\/fivemor.com\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/fivemor.com\/index.php?rest_route=\/wp\/v2\/posts\/80480","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fivemor.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fivemor.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=80480"}],"version-history":[{"count":0,"href":"https:\/\/fivemor.com\/index.php?rest_route=\/wp\/v2\/posts\/80480\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=\/wp\/v2\/media\/33485"}],"wp:attachment":[{"href":"https:\/\/fivemor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=80480"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=80480"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=80480"},{"taxonomy":"dealstore","embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fdealstore&post=80480"},{"taxonomy":"offerexpiration","embeddable":true,"href":"https:\/\/fivemor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fofferexpiration&post=80480"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}