Plugin icon

WP STAGING – WordPress Backup, Restore & Migration

wp-staging

Vulnerabilities:

7

Last Updated:

March 18, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2024-05-28
Title
WP STAGING WordPress Backup Plugin – Migration Backup Restore < 3.5.0 - Admin+ Arbitrary File Upload
Fixed in
Fixed in 3.5.0
CVSS
6.5 (medium)
Published
2024-05-10
Title
Migration Backup Restore < 3.5.0 - Admin+ SSRF
Fixed in
Fixed in 3.5.0
CVSS
4.1 (medium)
Published
2024-04-25
Title
WP STAGING <= 3.4.3 and WP STAGING Pro <= 5.4.3 - Sensitive Information Exposure via Log File
Fixed in
Fixed in 3.5.0
CVSS
5.3 (medium)
Published
2024-03-27
Title
WP Staging (Free < 3.4.0, Pro < 5.4.0) - Admin+ Stored XSS
Fixed in
Fixed in 3.4.0
CVSS
3.5 (low)
Published
2024-01-05
Title
WP STAGING WordPress Backup Plugin – Migration Backup Restore < 3.2.0 - Unauthorized Sensitive Data Exposure
Fixed in
Fixed in 3.2.0
CVSS
8.2 (high)
Published
2023-12-06
Title
WP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup Download
Fixed in
Fixed in 3.1.3
CVSS
7.5 (high)
Published
2022-08-17
Title
WP STAGING < 2.9.18 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 2.9.18
CVSS
3.4 (low)