CVE-2026-120530 | WebToffee WP Backup and Migration Plugin up to 1.6.1 on WordPress description sql injection

November 7, 2026 Yanac

A vulnerability categorized as critical has been discovered in WebToffee WP Backup and Migration Plugin up to 1.6.1 on WordPress. This vulnerability affects unknown code. The manipulation of the argument Description results in sql injection.

This vulnerability was named CVE-2026-120530. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More