WordPress Simple Backup plugin versions prior to 2.7.10 suffer from file download and path traversal vulnerabilities.