CVE-2026-42630

Deferred Deferred - Pending Action

Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager

Publication date: 2026-10-10

Last updated on: 2026-10-13

Assigner: Patchstack

Description

Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager <= 0.2.25 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-10

Last Modified

2026-10-13

Generated

2026-10-19

AI Q&A

2026-10-10

EPSS Evaluated

2026-10-18

NVD

CVE-2026-42630

EUVD

EUVD-2026-96432

Affected Vendors & Products

Vendor	Product	Version / Range
Web	Plura	Web Plura Backup & Restore Manager n/a

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-201	The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

Attack-Flow Graph

Executive Summary

This vulnerability is an unauthenticated sensitive data exposure issue in Web Plura Backup & Restore Manager versions 0.2.25 and below. It allows attackers to access sensitive data without authentication.

Detection Guidance

To detect this vulnerability, check if the Web Plura Backup & Restore Manager plugin version 0.2.25 or below is installed on your WordPress site. You can verify the plugin version by inspecting the plugin files or using WordPress admin panel. No specific commands are provided in the context, but manual inspection of the plugin version is recommended.

Impact Analysis

An attacker could exploit this to steal sensitive data from affected systems. The high CVSS score (7.5) indicates significant risk due to potential confidentiality breaches.

Compliance Impact

This vulnerability exposes sensitive data such as passwords, emails, and payment details, which could lead to violations of GDPR and HIPAA due to unauthorized access to personal and protected health information.

Mitigation Strategies

Update Web Plura Backup & Restore Manager to the latest version to address the unauthenticated sensitive data exposure vulnerability.

Hi! I’m here to help you understand CVE-2026-42630. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70