CVE-2026-8996
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
The Backup and Staging by WP Time Capsule plugin for WordPress up to version 1.22.26 is vulnerable to sensitive information exposure. An authenticated attacker with subscriber-level access or higher can download the most recently admin-decrypted SQL database backup, which contains password hashes, user credentials, and other sensitive site configuration data.
Risk Assessment
The risk involves potential theft of authentication credentials and sensitive configuration data, which could lead to admin account takeover or data breach.
Recommendation
Immediately update the Backup and Staging by WP Time Capsule plugin to the latest available version. If an update is not possible, restrict access to the decryption functionality to trusted administrators only.
Other vulnerabilities in Backup and Staging by WP Time Capsule
Original NVD description (English source)
The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.22.26 via the download_recent_decrypted_file_wptc. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract download the most recently admin-decrypted SQL database backup, which typically contains password hashes, user credentials, and other sensitive site configuration data stored in the 'recent_decrypted_file' option. Exploitation requires that an administrator has previously performed a decrypt action, causing the decrypted SQL backup file to exist in the plugin's upload directory; without this prior admin action, there is no file to serve.