Vulnerabilities / WP STAGING WordPress Backup Plugin – Migration Backup Restore
WP STAGING WordPress Backup Plugin – Migration Backup Restore vulnerabilities
Advisories WPSec published for WP STAGING – Backups & Restore, Migration & Clone Plugin – Cloud Backups, Scheduled Backups. Other sources may list more. Its attack surface: WP STAGING WordPress Backup Plugin – Migration Backup Restore on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-20 | WPSEC-2026-1259 | WP STAGING WordPress Backup Plugin – Migration Backup Restore <= 4.17.0 - Unauthenticated Staging Site Login Protection Bypass via 'rest_route' Parameter | Medium 6.5 | 4.18.0 |
| 2026-10-10 | WPSEC-2026-0701 | WP STAGING WordPress Backup Plugin – Migration Backup Restore <= 4.16.0 - Unauthenticated Sensitive Information Exposure via Corrupted Staging Site Report File | Medium 5.9 | 4.17.0 |
License: CC BY 4.0