EUVD-2026-124970

The WP STAGING – Backups & Restore, Migration & Clone Plugin – Cloud Backups, Scheduled Backups plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all versions up to, and including, 4.19.0. This is due to insufficient path validation in the cleanStagingDirectory function, where...

CVE-2026-115871

The WP STAGING – Backups & Restore, Migration & Clone Plugin for WordPress (versions up to and including 4.19.0 ) is vulnerable to Arbitrary Directory Deletion . The root cause is insufficient path validation in the cleanStagingDirectory function, where the deleteDir parameter fails to block .. t...

CVE-2026-115871 WP STAGING <= 4.19.0 - Authenticated (Administrator+) Arbitrary Directory Deletion via 'deleteDir' Parameter

The WP STAGING – Backups & Restore, Migration & Clone Plugin – Cloud Backups, Scheduled Backups plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all versions up to, and including, 4.19.0. This is due to insufficient path validation in the cleanStagingDirectory function, where...