Log in Start free

Revmakx

Products

ProductCVEsExploitedLatest
Backup and Staging by WP Time Capsule7–Jul 9, 2026
InfiniteWP Client5–Sep 18, 2026
WP Duplicate2–Oct 6, 2026
WPCal.io – Easy Meeting Scheduler2–May 10, 2024
WP Duplicate – WordPress Migration Plugin1–Feb 6, 2026
WPCal.io1–Dec 30, 2025
DefendWP Firewall1–Feb 27, 2025

Exploited and recent CVEs

  • CVE-2026-39755 Critical 9.9 WordPress WP Duplicate plugin <= 1.1.11 - Arbitrary File Upload vulnerability 0.4%
  • CVE-2026-17576 Medium 6.5 InfiniteWP Client <= 1.13.9 - Authenticated (Admin+) SQL Injection via 'iwp_get_comments_*' Array Key 0.5%
  • CVE-2026-74011 High 7.6 WordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerability 0.4%
  • CVE-2026-8996 Medium 6.5 Backup and Staging by WP Time Capsule <= 1.22.26 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via download_recent_decrypted_file_wptc Function 0.5%
  • CVE-2026-42760 High 7.5 WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.25 - Broken Authentication vulnerability 0.3%
  • CVE-2026-1499 High 8.8 WP Duplicate <= 1.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via 'process_add_site' AJAX Action 1.0%
  • CVE-2025-66103 Medium 6.5 WordPress WPCal.io plugin <= 0.9.5.9 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-47477 High 7.1 WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.23 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-22280 High 7.6 WordPress DefendWP Firewall Plugin <= 1.1.0 - Broken Access Control vulnerability 0.3%
  • CVE-2025-24652 Medium 5.4 WordPress WP Duplicate plugin <= 1.1.6 - Broken Access Control vulnerability 0.4%
  • CVE-2024-10585 Medium 5.3 InfiniteWP Client <= 1.13.0 - Unauthenticated Limited Directory Traversal to Arbitrary .txt File Reading 0.7%
  • CVE-2024-8856 Critical 9.8 Backup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File Upload 94.1%
  • CVE-2024-49684 High 7.2 WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - PHP Object Injection vulnerability 0.5%
  • CVE-2024-48020 High 8.5 WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - SQL Injection vulnerability 0.5%
  • CVE-2024-38770 Critical 9.8 WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.20 - Authentication Bypass and Privilege Escalation Vulnerability 0.5%
  • CVE-2024-34816 Medium 5.4 WordPress WPCal.io plugin <= 0.9.5.8 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-32795 Medium 4.3 WordPress WPCal.io <= 0.9.5.8 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2023-6565 Medium 5.9 InfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information Exposure 0.6%
  • CVE-2023-2916 High 7.5 InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure 24.0%