CVE-2026-97241: WordPress BackupEase plugin <= 2.2.2 - Sensitive Data Exposure vulnerability
Published Sep 30, 2026
·Updated
Unauthenticated Sensitive Data Exposure in BackupEase <= 2.2.2 versions.
Affected Software
1 affected component
BackupEase BackupEase<=2.2.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress BackupEase Pluginto a version that resolves this vulnerability.Fixed in 2.2.3
Event History
Sep 30, 2026
CVE Published
via MITRE·12:28 PM
Data Sourced
via MITRE·12:28 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The issue is unauthenticated, so an attacker does not need a WordPress account or other prior privileges to exploit it. The network attack vector indicates the affected site must be reachable over the network.
2
What versions are affected?
BackupEase versions 2.2.2 and earlier are identified as affected. The provided data does not identify a fixed version.
3
What is the potential impact?
The vulnerability can expose sensitive data. The supplied CVSS vector rates confidentiality impact as high and indicates no integrity or availability impact.