CVE-2026-105071

HighCVSS 7.5

Published: 06/10/2026(UTC)Updated: 06/10/2026(UTC)Translated: 06/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

Summary

Unauthenticated Sensitive Data Exposure vulnerability in SiteVault – Backup, Restore, Migration & Cloning up to version 1.5.17 allows an unauthenticated attacker to access sensitive data.

Risk Assessment

An unauthenticated attacker could access backup data, potentially leading to disclosure of confidential information.

Recommendation

Update the SiteVault plugin to the latest version that includes a fix for this vulnerability.

Other vulnerabilities in SiteVault

CVE-2026-42696Critical
The SiteVault – Backup, Restore, Migration & Cloning plugin in versions up to and including 1.5.19 contains an unauthenticated Remote Code Execution (RCE) vulnerability. The lack of required authorization allows exploitation without an account.

Original NVD description (English source)

Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS