ploudapp pCloud WP Backup

• CVE-2026-14503 Medium 6.5 pCloud WP Backup <= 2.0.3 - Missing Authorization on the 'start_backup' AJAX Method to Authenticated (Subscriber+) Arbitrary File Read 0.5%
• CVE-2026-57757 High 7.1 WordPress pCloud WP Backup plugin <= 2.0.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%