https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:34:29.109998+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-77006 CVE-2026-77006 — WebTotem Backups < 1.1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal 2026-10-07T02:34:29.128010+00:00

Affected: Unknown WebTotem Backups

The WebTotem Backups WordPress plugin before 1.1.0 does not validate a user-supplied file path, does not check the capability of the user making the request, and discards the result of its own CSRF check, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can lead to a site takeover.