The BackWPup plugin for WordPress is vulnerable to Plaintext Storage of Backup Destination Password in all versions up to, and including, 4.0.2. Rated low severity (CVSS 2.2), this vulnerability is remotely exploitable.
Information Disclosure
WordPress
Backwpup
NVD
VulDB
CVSS 3.1
2.2
EPSS
0.2%