https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 14:55:17 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-335442 EUVD-2026-335442 https://cve.radiocsirt.org/vuln/euvd-2026-335442 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8996 <p>The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.22.26 via the download_recent_decrypted_file_wptc. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract download the most recently admin-decrypted SQL database backup, which typically contains password hashes, user credentials, and other sensitive site configuration data stored in the &#39;recent_decrypted_file&#39; option. Exploitation requires that an administrator has previously performed a decrypt action, causing the decrypted SQL backup file to exist in the plugin&#39;s upload directory; without this prior admin action, there is no file to serve.</p> <p>The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.22.26 via the download_recent_decrypted_file_wptc. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract download the most recently admin-decrypted SQL database backup, which typically contains password hashes, user credentials, and other sensitive site configuration data stored in the &#39;recent_decrypted_file&#39; option. Exploitation requires that an administrator has previously performed a decrypt action, causing the decrypted SQL backup file to exist in the plugin&#39;s upload directory; without this prior admin action, there is no file to serve.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-8996 https://cve.radiocsirt.org/vuln/ghsa-cxpp-m57j-hhq8 <p>The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.22.26 via the download_recent_decrypted_file_wptc. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract download the most recently admin-decrypted SQL database backup, which typically contains password hashes, user credentials, and other sensitive site configuration data stored in the &#39;recent_decrypted_file&#39; option. Exploitation requires that an administrator has previously performed a decrypt action, causing the decrypted SQL backup file to exist in the plugin&#39;s upload directory; without this prior admin action, there is no file to serve.</p> <p>The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.22.26 via the download_recent_decrypted_file_wptc. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract download the most recently admin-decrypted SQL database backup, which typically contains password hashes, user credentials, and other sensitive site configuration data stored in the &#39;recent_decrypted_file&#39; option. Exploitation requires that an administrator has previously performed a decrypt action, causing the decrypted SQL backup file to exist in the plugin&#39;s upload directory; without this prior admin action, there is no file to serve.</p> https://cve.radiocsirt.org/vuln/ghsa-cxpp-m57j-hhq8