Advisories · Technology

BackupSheep WordPress Backup Plugin.

Every CVE that names BackupSheep WordPress Backup Plugin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-101148 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

BackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion and Backup Exfiltration via Empty Integration Key
- BackupSheep WordPress Backup Plugin
- Path traversal
Not analysed yet 1 Oct 2026