CVE-2026-19453

JetBackup for WordPress (versions 3.1.7.9 through 3.1.23.3 ) contains a privilege escalation vulnerability. The plugin fails to verify the role or capabilities of the user account it preserves across a restore or migration operation before granting it administrator privileges . This allows a subs...