Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-104068— JetBackup WordPress Plugin < 3.1.24.10 Symlink Arbitrary File Write via Backup Restore

Quick assessment

Affected
JetBackup JetBackup
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

WordPress 的 JetBackup 插件在 3.1.24.10 之前版本中存在一个基于符号链接的任意文件写入漏洞。该漏洞允许已认证的 WordPress 管理员在备份导入和恢复过程中，将攻击者控制的文件内容写入到预期恢复目标之外。攻击者可构造包含符号链接的备份归档，在归档提取过程中，系统会跟随该符号链接，且未对目标路径进行验证或强制限制在指定目录内，从而可能导致服务器端代码执行（具体取决于可写入的目标路径及服务器配置）。

CVSS 7.2 · High

Affected Version Matrix 1

VendorProduct Version RangeStatus
JetBackup JetBackup < 3.1.24.10 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-104068

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
JetBackup WordPress Plugin < 3.1.24.10 Symlink Arbitrary File Write via Backup Restore
Source: CVE Program / CVE List V5
Vulnerability Description
JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulnerability that allows an authenticated WordPress administrator to write attacker-controlled file contents outside the intended restore destination during backup import and restore. Attackers can craft a backup archive containing a symbolic link that archive extraction follows without validating targets or enforcing destination containment, potentially leading to server-side code execution depending on the writable destination and server configuration.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
在文件访问前对链接解析不恰当(链接跟随)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
JetBackup JetBackup 0 ~ 3.1.24.10 -

II. Public POCs for CVE-2026-104068

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-104068

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-104068 (1)

Vendor Pages for CVE-2026-104068 (1)

IV. Related Vulnerabilities

Same product: JetBackup
Same vendor: JetBackup
Same weakness: CWE-59

V. Comments for CVE-2026-104068

No comments yet

Leave a comment