CVE-2026-107237
Deferred Deferred - Pending Action

Authenticated Subscriber Staging Site Takeover in WP Time Capsule

Publication date: 2026-10-21

Last updated on: 2026-10-21

Assigner: WPScan

Description
The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.28 does not perform capability or nonce checks on the handler that deploys a staging site to the live site, allowing any authenticated user with a Subscriber account on a WP Time Capsule staging site to overwrite the separate live site's database and configuration and take it offline.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-21
Last Modified
2026-10-21
Generated
2026-11-10
AI Q&A
2026-10-21
EPSS Evaluated
2026-11-09
NVD
CVE-2026-107237
EUVD
EUVD-2026-107060

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Unknown Backup and Staging by WP Time Capsule 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the Backup and Staging by WP Time Capsule WordPress plugin before version 1.22.28. It allows any authenticated user with a Subscriber role on a staging site to overwrite the live site's database and configuration without proper checks, causing the live site to go offline.

Detection Guidance

Check the installed version of the Backup and Staging by WP Time Capsule plugin. If it is below 1.22.28, the system is vulnerable. Log in as a Subscriber user and attempt to deploy a staging site to the live site. If successful without proper authorization prompts, the vulnerability is present.

Impact Analysis

An attacker with a Subscriber account could deploy a staging site to the live site, overwriting its data and settings. This could lead to data loss, site downtime, and unauthorized changes to the live website.

Compliance Impact

This vulnerability could lead to unauthorized access and modification of sensitive data, potentially violating GDPR (data protection) and HIPAA (health information privacy) requirements. Compliance may be compromised due to data breaches or integrity issues.

Mitigation Strategies

Update the Backup and Staging by WP Time Capsule plugin to version 1.22.28 or later immediately. Review user roles on staging sites to ensure only authorized users have Subscriber access. Monitor for unauthorized deployments to the live site.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-107237. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...