CVE WATCH / VULNERABILITY DETAIL
CVE-2026-104307
UNKNOWNCVSS 0NVD feed
Published 8 November 2026 · tracked since 8 November 2026
Description
The BackUpWordPress plugin before 3.15 does not perform a capability or nonce check on an AJAX action that cleans up its backup directory, allowing any authenticated user (Subscriber and above) to delete the BackUpWordPress plugin before 3.15's backup protection and working files, removing download
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-104639
- CVE-2026-104338
- CVE-2026-104337
- CVE-2026-103375
- CVE-2026-103303
- CVE-2026-123613 MEDIUM 5.3
- CVE-2026-123612 LOW 2.3
- CVE-2026-123611 LOW 3.7
- CVE-2026-123610 LOW 3.7
- CVE-2026-123609 MEDIUM 4