CVE-2025-2257

Summary

CVE-2025-2257 is a Remote Code Execution vulnerability affecting the Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid. This issue impacts all versions up to and including 1.16.10. The vulnerability arises due to the plugin's use of the compression_level setting in proc_open() without proper validation. An authenticated attacker with administrator-level access or higher can exploit this flaw to execute arbitrary code on the server. This poses a significant security risk, and users are advised to update to the latest version of the plugin as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.