{"id":"CVE-2019-25224","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-25224","generatedAt":"2026-10-27T20:19:16.404Z","title":"The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldump function.","description":"The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldump function. This vulnerability allows unauthenticated attackers to execute arbitrary commands on the host operating system.","published":"2025-07-25T03:15:33.000Z","lastModified":"2026-06-17T02:31:47.000Z","status":"Analyzed","sourceIdentifier":"security@wordfence.com","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-78"],"affected":["wpseeds/wp database backup"],"epss":{"score":0.22051,"percentile":0.97648,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 22.1%, higher than 98% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"https://blog.sucuri.net/2019/06/os-command-injection-in-wp-database-backup.html","tags":["Exploit","Third Party Advisory"],"source":"security@wordfence.com"},{"url":"https://packetstormsecurity.com/files/153781/","tags":["Exploit","Third Party Advisory"],"source":"security@wordfence.com"},{"url":"https://plugins.trac.wordpress.org/changeset/2078035/wp-database-backup","tags":["Patch"],"source":"security@wordfence.com"},{"url":"https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/wp_db_backup_rce.rb","tags":["Exploit"],"source":"security@wordfence.com"},{"url":"https://www.wordfence.com/blog/2019/05/os-command-injection-vulnerability-patched-in-wp-database-backup-plugin/","tags":["Exploit","Third Party Advisory"],"source":"security@wordfence.com"},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d21cf285-9d75-43a2-9e81-67116f0bf896?source=cve","tags":["Third Party Advisory"],"source":"security@wordfence.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-25224","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}