WebToffee WebToffee WP Backup and Migration

• CVE-2026-120530 Medium 5.7 WebToffee WP Backup and Migration <= 1.6.1 - Authenticated (Subscriber+) SQL Injection via User Profile Biography –
• CVE-2024-3546 Medium 4.3 WordPress Backup & Migration <= 1.4.8 - Missing Authorization to Directory Traversal 0.5%