JetBackup vulnerabilities
We track 2 vulnerabilities in JetBackup products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 22, 2026.
2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score
Latest JetBackup vulnerabilities
- 7.2 High severity
JetBackup: Improper Link Resolution Before File Access
JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulnerability that allows an authenticated WordPress administrator to write attacker-controlled file contents outside the intended restore destination during backup i
- 7.1 High severity
JetBackup: Improper Privilege Management
The JetBackup WordPress plugin before 3.1.23.5 does not verify the role or capabilities of the account it preserves across a restore or migration before granting it administrator privileges, allowing a subscriber-level user to gain administrator access after t