Medium
CVE-2026-94375
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 494
Reset filters
Medium
CVE-2026-86828
BackWPup – WordPress Backup & Restore Plugin < 5.7.7 - Authenticated (Administrator+) Path Traversal
Medium
CVE-2026-86827
BackWPup – WordPress Backup & Restore Plugin 3.3 - 5.7.6 - Missing Authorization
Medium
CVE-2026-86826
BackWPup – WordPress Backup & Restore Plugin < 5.7.7 - Unauthenticated Information Exposure
Critical
CVE-2026-42696
SiteVault – Backup, Restore, Migration & Cloning <= 1.5.18 - Unauthenticated Remote Code Execution
Critical
CVE-2026-39802
Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin <= 2.3.13 - Unauthenticated Remote Code Execution
Medium
CVE-2026-42630
Web Plura Backup & Restore – Local Backups, Restore & Recovery <= 0.2.25 - Unauthenticated Information Exposure
Medium
CVE-2026-42419
Swish Migrate and Backup <= 1.4.0 - Unauthenticated Information Exposure
High
CVE-2026-75962
Post SMTP <= 4.0.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user_email' Parameter (Multisite Registration → Failed Email Log)
Medium
CVE-2026-41559
SafeSnap – Verified WordPress Backup & Restore <= 2.1.2 - Unauthenticated Information Exposure
Medium
CVE-2026-41560
WXD Backup Lite <= 1.0.2 - Missing Authorization
Medium
CVE-2026-41562
Norvis Backup <= 1.1.0 - Unauthenticated Information Exposure
Medium
CVE-2026-42413
Snapshotify – All-in-One Backup & Restore & Migrate <= 1.3.2 - Unauthenticated Information Exposure
Medium
CVE-2026-105071
SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 - Unauthenticated Information Exposure
High
CVE-2026-101888
Prime Mover – Backup and Migration <= 2.2.0 - Authenticated (Admin+) Arbitrary File Upload
High
CVE-2026-101889
Prime Mover – Backup and Migration <= 2.2.0 - Authenticated (Admin+) Arbitrary Directory Deletion
Medium
CVE-2026-101890
Prime Mover – Backup and Migration <= 2.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2026-97241
BackupEase – Scheduled Backup, Restore & Site Migration <= 2.2.2 - Unauthenticated Information Exposure
Medium
CVE-2026-97240
StifLi Backup Tools <= 2.2.7 - Unauthenticated Information Exposure
Critical
CVE-2026-101148
BackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2026-97197
WebToffee WP Backup and Migration <= 1.6.0 - Missing Authorization
Medium
CVE-2026-82841
UpdraftPlus 1.23.8 - 1.26.7 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2026-89064
All-in-One WP Migration and Backup <= 7.110 - Unauthenticated Insufficient Credential Protection via Authorization Basic Header
Medium
CVE-2026-81810
All-in-One WP Migration and Backup <= 7.110 - Authenticated (Admin+) Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.