CVE-2026-104307None▾ SunlitThe BackUpWordPress plugin before 3.15 does not perform a capability or nonce check on an AJAX action that cleans up its backup directory, allowing any authenticated user (Subscriber and above) to delete the BackUpWordPress plugin before…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
The BackUpWordPress plugin before 3.15 does not perform a capability or nonce check on an AJAX action that cleans up its backup directory, allowing any authenticated user (Subscriber and above) to delete the BackUpWordPress plugin before 3.15's backup protection and working files, removing download protection from stored backups and disrupting in-progress backups.
BackUpWordPress < 3.15Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-124446High· 8.8OpenEMR before 8.3.0 Arbitrary File Read and Write via FaxSMS disposeDocument
CVE-2026-124450Critical· 9.9OpenEMR before 8.3.0 Arbitrary File Read/Write via disposeDocument
CVE-2026-124479Medium· 6.5OpenEMR before 8.4.0 Arbitrary File Read via REST Document Download
CVE-2026-124490Critical· 9.1OpenEMR before 8.3.0 Arbitrary File Read/Write via oe-module-faxsms disposeDocument
CVE-2026-118532Medium· 6.5Directorist < 8.11 - Subscriber+ Arbitrary Media Deletion via Listing Image Field
CVE-2026-121379Critical· 9.6Tournamatch < 4.7.1 - Subscriber+ Arbitrary File Deletion