What’s Vulnerable › Products

WP STAGING WordPress Backup Plugin vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your WP STAGING WordPress Backup Plugin version is affected

Latest WP STAGING WordPress Backup Plugin vulnerabilities

• CVE-2025-3104 — WP Staging Pro <= 6.1.2 - Unauthenticated Information Exposure via getOutdatedPluginsRequest Function (CVSS 5.3)
• CVE-2024-5551 — WP STAGING PRO - Backup Duplicator & Migration <= 5.6.0 - Cross-Site Request Forgery to Limited Local File Inclusion (CVSS 8.8)
• CVE-2024-4469 — Migration Backup Restore < 3.5.0 - Admin+ SSRF (CVSS 7.5)
• CVE-2024-3682 — WP STAGING <= 3.4.3 and WP STAGING Pro <= 5.4.3 - Sensitive Information Exposure via Log File (CVSS 5.3)
• CVE-2024-2309 — WP Staging < 3.4.0, 5.4.0 (Pro Version) - Admin+ Stored XSS (CVSS 4.8)
• CVE-2023-7204 — WP STAGING WordPress Backup Plugin < 3.2.0 - Unauthorized Sensitive Data Exposure (CVSS 7.5)
• CVE-2023-6113 — WP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup Download (CVSS 7.5)
• CVE-2022-2737 — WP STAGING < 2.9.18 - Admin+ Stored Cross-Site Scripting (CVSS 4.8)