Attributed metadata history
Up to 100 retained publisher events per page for CVE-2025-10306. Withdrawals and unavailable references remain attributed to their publishers.
nvd
observed · 2026-10-12 09:42:03 UTC
The Backup Bolt plugin for WordPress is vulnerable to arbitrary file downloads and backup location writes in all versions up to, and including, 1.4.1 via the process_backup_batch() function. This makes it possible for authenticated attackers, with Administrator-level access and above, to download directories outside of the webroot and write backup zip files to arbitrary locations.
Fingerprint: 408fcadc79c8bf113c8952168c06e3648d56b334c9cf1f2210fe040dae7b05d9
nvd
available · 2026-10-12 04:02:58 UTC
available
Fingerprint: 1a480b1c570dfec82c1cc39b732387360c17935637e0981c7b0fd9c8798dc341