Request to patch BackWPup 4.x for security vulnerability
-
Hello,
I would like to raise a concern regarding the recently disclosed vulnerability in BackWPup, as described here:
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/backwpup/backwpup-550-missing-authorization-to-sensitive-information-exposureWhile the issue has been addressed in the 5.x release line, there are still a very large number of active users running the 4.x series of BackWPup. For many of them, upgrading to the 5.x branch may not be immediately possible due to environment or compatibility constraints.
Given the security implications of this vulnerability, would it be possible to backport the fix to the 4.x branch as well? Even a minimal patch release that closes the authorization gap would help protect a significant user base that still relies on BackWPup 4.x.
Thank you for considering this request, and for your continued work in keeping BackWPup safe and reliable.
The topic ‘Request to patch BackWPup 4.x for security vulnerability’ is closed to new replies.