WordPress plugin
WP STAGING – Backups & Restore, Migration & Clone Plugin – Cloud Backups, Scheduled Backups security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 8 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High0
- Medium6
- Low1
All WP STAGING – Backups & Restore, Migration & Clone Plugin – Cloud Backups, Scheduled Backups vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.1 | Authenticated (Admin+) Arbitrary File Upload ≤3.4.3Update to 3.5.0 | CVE-2024-3412 |
- Critical9.1Authenticated (Admin+) Arbitrary File Upload
≤3.4.3Update to 3.5.0
WP STAGING – Backups & Restore, Migration & Clone Plugin – Cloud Backups, Scheduled Backups: common questions
Does WP STAGING – Backups & Restore, Migration & Clone Plugin – Cloud Backups, Scheduled Backups have known vulnerabilities?
Yes. VulnCrest Radar lists 8 known vulnerabilities in WP STAGING – Backups & Restore, Migration & Clone Plugin – Cloud Backups, Scheduled Backups: 1 critical, 6 medium, 1 low. None are known to affect version null.
How do I check which version of WP STAGING – Backups & Restore, Migration & Clone Plugin – Cloud Backups, Scheduled Backups I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP STAGING – Backups & Restore, Migration & Clone Plugin – Cloud Backups, Scheduled Backups vulnerability?
CVE-2026-115871, published Nov 12, 2026: WP STAGING <= 4.19.0 - Authenticated (Administrator+) Arbitrary Directory Deletion via 'deleteDir' Parameter. Severity: Low (CVSS 2.7).
Is any WP STAGING – Backups & Restore, Migration & Clone Plugin – Cloud Backups, Scheduled Backups vulnerability listed in CISA KEV?
No. None of the known WP STAGING – Backups & Restore, Migration & Clone Plugin – Cloud Backups, Scheduled Backups vulnerabilities is currently listed in the CISA KEV catalog.