BlogVault Backup & Staging

BlogVault Backup & Staging has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2017 and 2026; all 2 are fixed as of October 2026. Their average CVSS score is 9.1, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high.

The most common weakness is Deserialization Of Untrusted Data, behind 1 of the records (50%). Other recurring categories include Use Of Cryptographically Weak Pseudo-Random Number Generator (PRNG).

Every one of the 2 issues recorded for BlogVault Backup & Staging has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Jakub Herman.

Strategic Overview

Avg CVSSCritical

9.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all BlogVault Backup & Staging vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2026-19718

The WP Remote WordPress Plugin, Malcare Security, and BlogVault Backup & Staging < 6.65 - Unauthenticated Site Takeover via Brute Force

Read the full analysis

Vulnerability Records

2 records


2026-08-24 00:00	The WP Remote WordPress Plugin, Malcare Security, and BlogVault Backup & Staging < 6.65 - Unauthenticated Site Takeover via Brute Force BlogVault Backup & Staging < 6.65	`CVE-2026-19718`	9.8 Critical	Jakub Herman	Yes
2017-04-06 00:00	BlogVault WordPress Backup Plugin 1.40 - 1.44 - Unauthenticated PHP Object Injection BlogVault Backup & Staging 1.40 – 1.44	`N/A`	8.3 High	Anonymous	Yes

Showing 1–2 of 2 reports