WordPress warning: 140k BackupBuddy installations on alert over file-read exploitation

Adam Bannister

08 September 2022 at 13:57 UTC

Updated: 08 September 2022 at 16:32 UTC

Site backup plugin developer issues patch following reports of millions of exploit attempts

UPDATED WordPress websites running BackupBuddy have been urged to update the plugin amid reports of active exploitation of a high severity arbitrary file download/read vulnerability.

BackupBuddy, which is used to backup WordPress sites, and has around 140,000 active installations.

WordPress security firm Wordfence has…