188 matches found
CVE-2026-41559
Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...
CVE-2026-41559 WordPress SafeSnap – Verified WordPress Backup & Restore plugin <= 2.1.2 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...
CVE-2026-41559
The SafeSnap – Verified WordPress Backup & Restore plugin (versions
EUVD-2026-93046
Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...
CVE-2023-6972-Exploit-Arbitrary-File-Deletion
CVE-2023-6972 Prueba de Concepto PoC Descripción Este repositorio contiene una prueba de concepto PoC del exploit para CVE-2023-6972. La vulnerabilidad permite la eliminación arbitraria de archivos sin autenticación AFD en el plugin de migración de respaldo de Wordpress Nota: Un análisis técnico...
CVE-2023-6553
CVE-2023-6553 Desarrollo de exploit para CVE-2023-6553 en el plugin Backup en Wordpress Esto es una CVE crítica con una puntuación CVSS de 9.8 La vulnerabilidad permite al atacante enviar comandos al servidor que ejecuta la versión vulnerable del plugin Versión vulnerable Backup :9000/a.sh...
CVE-2026-101148 BackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion and Backup Exfiltration via Empty Integration Key
The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not properly validate its integration key, treating an unset or blank key as valid, which allows unauthenticated attackers to create and download full site backups, including the database with user password hashes, and to...
CVE-2026-101148 BackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion and Backup Exfiltration via Empty Integration Key
The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not properly validate its integration key, treating an unset or blank key as valid, which allows unauthenticated attackers to create and download full site backups, including the database with user password hashes, and to...
CVE-2026-101148: External Control of File Name or Path
The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not properly validate its integration key, treating an unset or blank key as valid, which allows unauthenticated attackers to create and download full site backups, including the database with user password hashes, and to...
CVE-2026-97197
Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...
CVE-2026-97197 WordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...
CVE-2026-97197
The WordPress Backup & Migration plugin versions
CVE-2026-97197 WordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...
EUVD-2026-89898
Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...
CVE-2026-97197: Missing Authorization
Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...
WordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by c4st1e in WordPress Plugin WordPress Backup & Migration versions = 1.6.0...
CVE-2026-14333
The Demi WordPress plugin before 0.0.7 stores its full-site backup archives in a publicly accessible location under a predictable filename and without access protection, allowing unauthenticated attackers to download complete backups including the site database and its user password hashes...
WordPress Backup and Staging by WP Time Capsule plugin < 1.21.16 - Authentication Bypass vulnerability
Authentication Bypass vulnerability discovered by WebARX Security in WordPress Plugin Backup and Staging by WP Time Capsule versions 1.21.16...
EUVD-2026-45132
The pCloud WP Backup plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.3 via the wp2pclajaxprocessrequestinner. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract force generation of a...