high7.4
CVE-2025-28954
Cross-Site Request Forgery (CSRF) vulnerability in wphobby Backwp backwp allows Path Traversal.This issue affects Backwp: from n/a through <= 2.0.2.
Impact
Cross-Site Request Forgery (CSRF) vulnerability in wphobby Backwp backwp allows Path Traversal.This issue affects Backwp: from n/a through <= 2.0.2.
Affected products
| Product | Affected versions |
|---|---|
| Backwp: From N/A Through | through 2.0.2. |
Versions were read from the advisory text. No structured product data has been published for this record yet.