cssimmon WP BackItUp Community Edition

• CVE-2026-18386 Medium 4.9 WP BackItUp Community Edition <= 2.1.0 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'backup_file' Parameter 1.1%