Backup And Staging By Wp Time Capsule

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:revmakx:backup_and_staging_by_wp_time_capsule:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorRevmakx (ec04725c-9c46-5125-b426-dfc1080ff232)
ProductBackup And Staging By Wp Time Capsule (df544189-12b9-52b0-a271-b72d9a0a0829)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8856 vulnerable 2026-06-08 07:00:25.847161 Backup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File Upload
CRITICAL (9.8)
The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the the UploadHandler.php file and no direct file access prevention in all versions up to, and including, 1.22.21. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
Published: 2024-11-16T04:29:15.950Z
Updated: 2026-04-08T17:35:01.041Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25035 vulnerable 2026-06-08 05:30:39.840958 Backup and Staging by WP Time Capsule < 1.22.7 - Reflected Cross-Site Scripting
The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.7 does not sanitise and escape the error parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
Published: 2022-01-24T08:01:15.000Z
Updated: 2024-08-03T19:49:14.533Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.