CVE-2026-19453

The JetBackup WordPress plugin before 3.1.23.5 does not verify the role or capabilities of the account it preserves across a restore or migration before granting it administrator privileges, allowing a subscriber-level user to gain administrator access after the site owner restores or migrates th...

CVE-2026-19453

JetBackup WordPress plugin (versions 3.1.7.9 through 3.1.23.3) contains a privilege escalation vulnerability. The plugin fails to verify the role or capabilities of a preserved account before granting administrator privileges during a restore or migration, allowing a subscriber-level user to gain...

CVE-2026-19453 JetBackup 3.1.7.9 - 3.1.23.3 - Subscriber+ Privilege Escalation via Restore Admin User Selection

The JetBackup WordPress plugin before 3.1.23.5 does not verify the role or capabilities of the account it preserves across a restore or migration before granting it administrator privileges, allowing a subscriber-level user to gain administrator access after the site owner restores or migrates th...