{"id":"CVE-2024-0842","aliases":["EUVD-2024-16625","GHSA-3rwv-jrrg-99x3"],"status":"published","title":"Backuply - Backup, Restore, Migrate and Clone \u003c= 1.2.6 -  Denial of Service","description":"The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 1.2.6. This is due to direct access of the backuply/restore_ins.php file and. This makes it possible for unauthenticated attackers to make excessive requests that result in the server running out of resources.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00957,"percentile":0.61686,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-400","CWE-834"],"published":"2024-02-09T04:31:54Z","modified":"2026-06-17T06:54:25Z","products":[{"vendor":"softaculous","product":"backuply"},{"vendor":"softaculous","product":"backuply – backup, restore, migrate and clone"}],"references":[{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/1f955d88-ab4c-4cf4-a23b-91119d412716?source=cve","tags":["x_transferred","Third Party Advisory"]},{"url":"https://plugins.trac.wordpress.org/changeset/3033242/backuply/trunk/restore_ins.php","tags":["x_transferred","Patch"]},{"url":"https://plugins.trac.wordpress.org/changeset?sfp_email=\u0026sfph_mail=\u0026reponame=\u0026old=3036756%40backuply\u0026new=3036756%40backuply\u0026sfp_email=\u0026sfph_mail="},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0842"},{"url":"https://github.com/advisories/GHSA-3rwv-jrrg-99x3"}],"sources":{"cve":[{"id":"CVE-2024-0842","title":"Backuply - Backup, Restore, Migrate and Clone \u003c= 1.2.6 -  Denial of Service","description":"The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 1.2.6. This is due to direct access of the backuply/restore_ins.php file and. This makes it possible for unauthenticated attackers to make excessive requests that result in the server running out of resources.","status":"published","published":"2024-02-09T04:31:54.615Z","modified":"2026-04-08T16:41:02.852Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:34:22.525279Z"}],"euvd":[{"id":"EUVD-2024-16625","description":"The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 1.2.6. This is due to direct access of the backuply/restore_ins.php file and. This makes it possible for unauthenticated attackers to make excessive requests that result in the server running out of resources.","status":"published","published":"2024-02-09T04:31:54Z","modified":"2026-04-08T16:41:02Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T19:25:06.888768Z"}],"ghsa":[{"id":"GHSA-3rwv-jrrg-99x3","title":"The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of...","description":"The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 1.2.5. This is due to direct access of the backuply/restore_ins.php file and. This makes it possible for unauthenticated attackers to make excessive requests that result in the server running out of resources.","status":"published","published":"2024-02-09T06:32:24Z","modified":"2026-04-08T18:33:39Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400","CWE-834"],"updated_at":"2026-11-02T15:07:15.041976Z"}],"nvd":[{"id":"CVE-2024-0842","description":"The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 1.2.6. This is due to direct access of the backuply/restore_ins.php file and. This makes it possible for unauthenticated attackers to make excessive requests that result in the server running out of resources.","status":"published","published":"2024-02-09T05:15:08.66Z","modified":"2026-06-17T06:54:25.16Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-400","CWE-834"],"updated_at":"2026-11-02T14:09:35.738752Z"}]}}