Wp-staging vulnerabilities
We track 2 vulnerabilities in Wp-staging products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 14, 2024.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Wp-staging vulnerabilities
- 8.8 High severity
WP STAGING Pro WordPress Backup Plugin: Cross-Site Request Forgery
The WP STAGING Pro WordPress Backup Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.6.0. This is due to missing or incorrect nonce validation on the 'sub' parameter called from the WP STAGING Word
- 7.5 High severity
WP STAGING WordPress Backup Plugin: Server-Side Request Forgery
The WP STAGING WordPress Backup Plugin WordPress plugin before 3.5.0 does not prevent users with the administrator role from pinging conducting SSRF attacks, which may be a problem in multisite configurations.