CyberSecBulletin

WebTotem Backups vulnerabilities

We track 1 vulnerability in WebTotem Backups products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 12, 2026.

1vulnerabilities
1critical
0high
0exploited
9.6average CVSS score

Latest WebTotem Backups vulnerabilities

  • 9.6 Critical severity

    WebTotem Backups: External Control of File Name or Path

    CVE-2026-77006WebTotem Backups

    The WebTotem Backups WordPress plugin before 1.1.0 does not validate a user-supplied file path, does not check the capability of the user making the request, and discards the result of its own CSRF check, allowing any authenticated user, such as a subscriber,