Unrated severityNVD Advisory· Published Oct 21, 2026
CVE-2026-107237
CVE-2026-107237
Description
The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.28 does not perform capability or nonce checks on the handler that deploys a staging site to the live site, allowing any authenticated user with a Subscriber account on a WP Time Capsule staging site to overwrite the separate live site's database and configuration and take it offline.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <1.22.28
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.