https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 19:31:00 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-256881 EUVD-2026-256881 https://cve.radiocsirt.org/vuln/euvd-2026-256881 https://cve.radiocsirt.org/vuln/fkie_cve-2025-10579 <p>The BackWPup – WordPress Backup &amp; Restore Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the &#39;backwpup_working&#39; AJAX action in all versions up to, and including, 5.5.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve access to a back-up&#39;s filename while a backup is running. This information has little value on it&#39;s own, but could be used to aid in a brute force attack to retrieve back-up contents in limited environments (i.e. NGINX).</p> <p>The BackWPup – WordPress Backup &amp; Restore Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the &#39;backwpup_working&#39; AJAX action in all versions up to, and including, 5.5.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve access to a back-up&#39;s filename while a backup is running. This information has little value on it&#39;s own, but could be used to aid in a brute force attack to retrieve back-up contents in limited environments (i.e. NGINX).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-10579 https://cve.radiocsirt.org/vuln/ghsa-vq3q-xwqw-cc8c <p>The BackWPup – WordPress Backup &amp; Restore Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the &#39;backwpup_working&#39; AJAX action in all versions up to, and including, 5.5.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve access to a back-up&#39;s filename while a backup is running. This information has little value on it&#39;s own, but could be used to aid in a brute force attack to retrieve back-up contents in limited environments (i.e. NGINX).</p> <p>The BackWPup – WordPress Backup &amp; Restore Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the &#39;backwpup_working&#39; AJAX action in all versions up to, and including, 5.5.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve access to a back-up&#39;s filename while a backup is running. This information has little value on it&#39;s own, but could be used to aid in a brute force attack to retrieve back-up contents in limited environments (i.e. NGINX).</p> https://cve.radiocsirt.org/vuln/ghsa-vq3q-xwqw-cc8c