Access violation vulnerability in BackWPup – WordPress Backup & Restore Plugin 5.5.0

The BackWPup plugin for WordPress has a security issue that could allow unauthorized access to data. This is because the plugin does not have a proper check in place for a certain action. This means that someone with Subscriber-level access or higher could potentially access the name of a back-up file while it is being created. While this information may not seem valuable, it could be used by attackers in certain situations to try and access the contents of the back-up through a brute force attack.