PT-2026-26714 · Fahad Mahmood · Keep Backup Daily

San6051 · Published 2026-03-20 · Updated 2026-03-21 · CVE-2026-3339

NVD

CVSS v3.1

2.7

Low

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

The Keep Backup Daily plugin for WordPress is vulnerable to Limited Path Traversal in all versions up to, and including, 2.1.1 via the kbd open upload dir AJAX action. This is due to insufficient validation of the kbd path parameter, which is only sanitized with sanitize text field() - a function that does not strip path traversal sequences. This makes it possible for authenticated attackers, with Administrator-level access and above, to list the contents of arbitrary directories on the server outside of the intended uploads directory.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-3339

Affected Products

Keep Backup Daily

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-3339 · Security Note
• https://plugins.trac.wordpress.org/browser/keep-backup-daily/trunk/inc/functions.php#L855 · Note
• https://plugins.trac.wordpress.org/browser/keep-backup-daily/tags/2.1.1/inc/functions.php#L871 · Note
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3481587%40keep-backup-daily&new=3481587%40keep-backup-daily&sfp_email=&sfph_mail= · Note
• https://plugins.trac.wordpress.org/browser/keep-backup-daily/tags/2.1.1/inc/functions.php#L855 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/01984754-e332-4500-99a2-10a7b79967f5?source=cve · Note