CVE-2026-14503 pCloud WP Backup <= 2.0.3 - Missing Authorization on the 'start_backup' AJAX Method to Authenticated (Subscriber+) Arbitrary File Read

The pCloud WP Backup plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.3 via the wp2pclajaxprocessrequestinner. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract force generation of a...

CVE-2026-57757

Unauthenticated Cross Site Request Forgery CSRF in pCloud WP Backup = 2.0.2 versions...

CVE-2026-57757

Unauthenticated Cross Site Request Forgery CSRF in pCloud WP Backup = 2.0.2 versions...

WordPress pCloud WP Backup plugin <= 2.0.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by R2D2 in WordPress Plugin pCloud WP Backup versions = 2.0.6...

EUVD-2018-11146

Malware in sbrugna...

EUVD-2023-39774

Malicious code in bioql PyPI...

CVE-2023-35775

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WP Backup Solutions WP Backup Manager plugin = 1.13.1 versions...

CVE-2018-19456

The WP Backup+ aka WPbackupplus plugin through 2018-11-22 for WordPress allows remote attackers to obtain sensitive information from server folders and files, as demonstrated by download.sql...

CVE-2023-35775

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WP Backup Solutions WP Backup Manager plugin = 1.13.1 versions...

CVE-2023-35775

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WP Backup Solutions WP Backup Manager plugin = 1.13.1 versions...

CVE-2023-35775

CVE-2023-35775 affects the WordPress WP Backup Manager plugin, where an unauthenticated reflected XSS exists in versions ≤ 1.13.1. Content from multiple sources confirms the vulnerability and the product, with remediation guidance to update to version 1.13.1 or later. Some entries note unpatched ...

CVE-2023-35775 WordPress WP Backup Manager Plugin <= 1.13.1 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WP Backup Solutions WP Backup Manager plugin = 1.13.1 versions...

WordPress WP Backup Manager Plugin <= 1.13.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Backup Manager Type Plugin Vulnerable versions = 1.13.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-35775 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 619985be1143 Credits Le Ngoc Anh...

CVE-2022-34148

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JetBackup JetBackup – WP Backup, Migrate & Restore plugin = 1.6.9.0 versions...

CVE-2018-19456

The WP Backup+ aka WPbackupplus plugin through 2018-11-22 for WordPress allows remote attackers to obtain sensitive information from server folders and files, as demonstrated by download.sql...

Design/Logic Flaw

The WP Backup+ aka WPbackupplus plugin through 2018-11-22 for WordPress allows remote attackers to obtain sensitive information from server folders and files, as demonstrated by download.sql...

CVE-2018-19456

CVE-2018-19456 affects the libgit2 library (used by various projects) and enables code execution via a malicious .gitmodules file. Connected advisories confirm a fix was released (e.g., openSUSE-SU-2019:0021-1 and related OSV/Red Hat entries) and describe remediation by updating libgit2. The WP B...