The Duplicator plugin in Wordpress prior to 0.5.10 allows remote authenticated users to create and download backup files.
snapcreek duplicator