Inpsyde

First CVE: Sep 28, 2017Active for: 9 yearsTotal CVEs: 6

Inpsyde is a WordPress plugin development firm whose vulnerability footprint centers on security and backup-related plugins such as BackWPup, reflecting the vendor's focus on the WordPress ecosystem. Its disclosures recur around path-traversal and directory-access weaknesses characteristic of file-handling and upload-management code, alongside cross-site scripting issues typical of web-application plugins. Live severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
6
Total CVEs
More Total CVEs than 86% of tracked vendors
1.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 12% of tracked vendors
6.5
Avg CVSS Score
Higher Avg CVSS Score than 42% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Inpsyde over time

Volume of CVEsAvg CVSS Base Score
First CVE
Sep 28, 2017
8 years ago
Most Recent CVE
Aug 17, 2024
707 days ago

Products(2 total)

Top CVEs

Signals from CVEs in this vendor scope (6 CVEs).

6 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2023-7164HIGH
The BackWPup WordPress plugin before 4.0.4 does not prevent Directory Listing in its temporary backup folder, allowing unauthenticated attackers to download backups of a site's dat
Apr 8, 20247.533NOYES
CVE-2023-5504HIGH
The BackWPup plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.0.1 via the Log File Folder. This allows authenticated attackers to store
Jan 11, 20248.726NONO
CVE-2023-5505MEDIUM
The BackWPup plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.0.1 via the job-specific backup folder. This allows authenticated attacke
Aug 17, 20246.822NONO
CVE-2021-25071MEDIUM
The WordPress plugin through 2.0.1 does not sanitise and escape the translation parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
Mar 28, 20226.121NONO
CVE-2017-2551HIGH
Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download.
Sep 28, 20177.519NONO
CVE-2023-5775LOW
The BackWPup plugin for WordPress is vulnerable to Plaintext Storage of Backup Destination Password in all versions up to, and including, 4.0.2. This is due to to the plugin improp
Feb 26, 20242.713NONO
View all 6 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products6 CVEs
Severity distribution among all CVEs352,427 CVEs
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network6 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None5 (83.3%)
Unknown0 (0.0%)
Required1 (16.7%)
Privileges Required
Low0 (0.0%)
High3 (50.0%)
None3 (50.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (6 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
16.7% of CVEs· 97th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Inpsyde.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Inpsyde — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Inpsyde's Products

View all 3 CNAs →

Top CWEs