CVE-2026-97197 Unauthenticated Broken Access Control in WordPress Backup & Migration <= 1.6.0 versions

Description

Unauthenticated Broken Access Control in WordPress Backup & Migration <= 1.6.0 versions.

Affected products and versions

Product	Affected versions	Fixed in
WordPress Backup & Migration 1.6	earliest → 1.6.0	No fix stated

Other CVEs of WordPress Backup & Migration

The 7 CVEs of WordPress Backup & Migration →

CVE-2025-24651 Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration… 5.9 Medium CVE-2023-45636 Missing Authorization vulnerability in WebToffee WordPress Backup & Migration wp-migration-duplicator allows… 5.4 Medium CVE-2023-33928 Missing Authorization vulnerability in WebToffee WordPress Backup & Migration allows Exploiting Incorrectly Configured… 4.3 Medium CVE-2023-52183 Missing Authorization vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup &… 5.4 Medium