Filtered by vendor Wordpress-extensions
Subscriptions
Filtered by product Webtotem Backups
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-77006 | 1 Wordpress-extensions | 1 Webtotem Backups | 2026-11-13 | 9.6 Critical |
| The WebTotem Backups WordPress plugin before 1.1.0 does not validate a user-supplied file path, does not check the capability of the user making the request, and discards the result of its own CSRF check, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can lead to a site takeover. | ||||
Page 1 of 1.