CVE-2026-107237 - Backup and Staging by WP Time Capsule < 1.22.28 - Subscriber+ Staging-to-Live Deployment via wptc_copy_stage_to_live
CVE ID :CVE-2026-107237 Published : Oct. 21, 2026, 6:16 a.m. | 5 hours, 50 minutes ago Description :The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.28 does not perform capability or nonce checks on the handler that deploys a staging site to the live site, allowing any...