https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 16:58:51 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-19454 <p>The JetBackup WordPress plugin before 3.1.23.5 does not perform its multisite authorisation check before serving backup archives and job logs, allowing an administrator of the network&#39;s main site who is not a Super Admin to download a full backup of the entire network, including every site&#39;s data and the shared webroot.</p> <p>The JetBackup WordPress plugin before 3.1.23.5 does not perform its multisite authorisation check before serving backup archives and job logs, allowing an administrator of the network&#39;s main site who is not a Super Admin to download a full backup of the entire network, including every site&#39;s data and the shared webroot.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-19454 https://vulnerability.circl.lu/vuln/ghsa-6883-v78q-c9cg <p>The JetBackup WordPress plugin before 3.1.23.5 does not perform its multisite authorisation check before serving backup archives and job logs, allowing an administrator of the network&#39;s main site who is not a Super Admin to download a full backup of the entire network, including every site&#39;s data and the shared webroot.</p> <p>The JetBackup WordPress plugin before 3.1.23.5 does not perform its multisite authorisation check before serving backup archives and job logs, allowing an administrator of the network&#39;s main site who is not a Super Admin to download a full backup of the entire network, including every site&#39;s data and the shared webroot.</p> https://vulnerability.circl.lu/vuln/ghsa-6883-v78q-c9cg