CVE-2026-8996Medium 6.5Backup and Staging by WP Time Capsule <= 1.22.26 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via download_recent_decrypted_file_wptc Function0.5%
CVE-2026-42760High 7.5WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.25 - Broken Authentication vulnerability0.3%
CVE-2025-47477High 7.1WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.23 - Reflected Cross Site Scripting (XSS) vulnerability0.3%
CVE-2024-8856Critical 9.8Backup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File Upload94.1%
CVE-2024-49684High 7.2WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - PHP Object Injection vulnerability0.5%
CVE-2024-48020High 8.5WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - SQL Injection vulnerability0.5%
CVE-2024-38770Critical 9.8WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.20 - Authentication Bypass and Privilege Escalation Vulnerability0.5%