JetBackup vulnerabilities

CVEs whose affected-version data names the JetBackup package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-104068High· 7.2

yesterday

JetBackup WordPress Plugin < 3.1.24.10 Symlink Arbitrary File Write via Backup Restore

JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulnerability that allows an authenticated WordPress administrator to write attacker-controlled file contents outside the intended restore dest…

▾ TwilightJetBackup · JetBackupvia CVEORG