CVE-2026-14333 in Demi Plugininformación

Resumen

por MITRE • 2026-07-31

The Demi WordPress plugin before 0.0.7 stores its full-site backup archives in a publicly accessible location under a predictable filename and without access protection, allowing unauthenticated attackers to download complete backups including the site database and its user password hashes.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

WPScan

Reservar

2026-07-01

Divulgación

2026-07-31

Moderación

aceptado

Artículo

VDB-385021

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Sector

Hostingprovider

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-14333
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-14333
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-14333/

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to know what is going to be exploited?

We predict KEV entries!