Revmakx vulnerabilities

Products

• Backup And Staging By Wp Time Capsule 9
• Infinitewp Client 5
• Infinitewp Client 5
• Backup And Staging By Wp Time Capsule 4
• Wpcal.io – Easy Meeting Scheduler 2
• Wp Duplicate 2

Newest

• revmakx backup and staging by wp time capsule Backup and Staging by WP Time Capsule < 1.22.28 - Subscriber+ Staging-to-Live Deployment via wptc_copy_stage_to_live CVE-2026-107237 8.2 HighOctober 21, 2026
• revmakx wp duplicate WordPress WP Duplicate plugin <= 1.1.11 - Arbitrary File Upload vulnerability CVE-2026-39755 9.9 CriticalOctober 6, 2026
• infinitewp client, revmakx infinitewp client +1 more InfiniteWP Client <= 1.13.9 - Authenticated (Admin+) SQL Injection via 'iwp_get_comments_*' Array Key CVE-2026-17576 6.5 MediumSeptember 18, 2026
• infinitewp client, revmakx infinitewp client +1 more WordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerability CVE-2026-74011 7.6 HighAugust 20, 2026
• revmakx backup and staging by wp time capsule Backup and Staging by WP Time Capsule <= 1.22.26 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via download_recent_decrypted_file_wptc Function CVE-2026-8996 6.5 MediumJuly 9, 2026
• revmakx backup and staging by wp time capsule WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.25 - Broken Authentication vulnerability CVE-2026-42760 7.5 HighMay 27, 2026
• revmakx wp duplicate – wordpress migration plugin WP Duplicate <= 1.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via 'process_add_site' AJAX Action CVE-2026-1499 8.8 HighFebruary 6, 2026
• revmakx wpcal.io WordPress WPCal.io plugin <= 0.9.5.9 - Cross Site Scripting (XSS) vulnerability CVE-2025-66103 6.5 MediumDecember 30, 2025
• revmakx backup and staging by wp time capsule WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.23 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-47477 7.1 HighJune 9, 2025
• revmakx defendwp firewall WordPress DefendWP Firewall Plugin <= 1.1.0 - Broken Access Control vulnerability CVE-2025-22280 7.6 HighFebruary 27, 2025
• revmakx wp duplicate WordPress WP Duplicate plugin <= 1.1.6 - Broken Access Control vulnerability CVE-2025-24652 5.4 MediumJanuary 24, 2025
• infinitewp client, revmakx infinitewp client +1 more InfiniteWP Client <= 1.13.0 - Unauthenticated Limited Directory Traversal to Arbitrary .txt File Reading CVE-2024-10585 5.3 MediumJanuary 8, 2025
• revmakx backup and staging by wp time capsule Backup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File Upload CVE-2024-8856 Public exploit EPSS 94.1% 9.8 CriticalNovember 16, 2024
• revmakx backup and staging by wp time capsule WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - PHP Object Injection vulnerability CVE-2024-49684 7.2 HighOctober 23, 2024
• revmakx backup and staging by wp time capsule WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - SQL Injection vulnerability CVE-2024-48020 8.5 HighOctober 11, 2024
• revmakx backup and staging by wp time capsule WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.20 - Authentication Bypass and Privilege Escalation Vulnerability CVE-2024-38770 9.8 CriticalAugust 1, 2024
• revmakx wpcal.io – easy meeting scheduler WordPress WPCal.io plugin <= 0.9.5.8 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-34816 5.4 MediumMay 10, 2024
• revmakx wpcal.io – easy meeting scheduler WordPress WPCal.io <= 0.9.5.8 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-32795 4.3 MediumApril 24, 2024
• infinitewp client, revmakx infinitewp client +1 more InfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information Exposure CVE-2023-6565 5.9 MediumFebruary 20, 2024
• infinitewp client, revmakx infinitewp client +1 more InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure CVE-2023-2916 Public exploit EPSS 24.0% 7.5 HighAugust 15, 2023
• revmakx infinitewp client, unspecified infinitewp client plugin +1 more InfiniteWP Client Plugin injection CVE-2016-15004 7.3 HighJuly 23, 2022
• revmakx backup and staging by wp time capsule Backup and Staging by WP Time Capsule < 1.22.7 - Reflected Cross-Site Scripting CVE-2021-25035 6.1 MediumJanuary 24, 2022
• revmakx infinitewp client The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in... CVE-2020-8772 Public exploit EPSS 87.7% 9.8 CriticalFebruary 6, 2020