BaseFortify

Publication date: 2025-10-03

Last updated on: 2026-04-08

Assigner: Wordfence

Description

The Backup Bolt plugin for WordPress is vulnerable to arbitrary file downloads and backup location writes in all versions up to, and including, 1.4.1 via the process_backup_batch() function. This makes it possible for authenticated attackers, with Administrator-level access and above, to download directories outside of the webroot and write backup zip files to arbitrary locations.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-03

Last Modified

2026-04-08

Generated

2026-07-06

AI Q&A

2025-10-03

EPSS Evaluated

2026-07-05

NVD

CVE-2025-10306

EUVD

EUVD-2025-32544

Affected Vendors & Products

Vendor	Product	Version / Range
wordpress	backup_bolt	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-73	The product allows user input to control or influence paths or file names that are used in filesystem operations.

Attack-Flow Graph

Executive Summary

The vulnerability in the Backup Bolt plugin for WordPress allows authenticated users with Administrator-level access or higher to download files from directories outside the webroot and to write backup zip files to arbitrary locations on the server. This occurs through the process_backup_batch() function in versions up to and including 1.4.1.

Impact Analysis

This vulnerability can allow an attacker with Administrator-level access to download sensitive files from the server that are outside the webroot, potentially exposing confidential data. Additionally, the attacker can write backup zip files to arbitrary locations, which could be used to overwrite important files or place malicious files on the server, leading to data integrity issues or further exploitation.

Hi! I’m here to help you understand CVE-2025-10306. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70