pCloud WP Backup
pCloud WP Backup has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 2 are fixed as of August 2026. Their average CVSS score is 5.4, and the most serious one scores 6.5 out of 10. 2026 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor.
Every one of the 2 issues recorded for pCloud WP Backup has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. pCloud WP Backup is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2026-14503pCloud WP Backup <= 2.0.3 - Missing Authorization on the 'start_backup' AJAX Method to Authenticated (Subscriber+) Arbitrary File Read
Read the full analysisVulnerability Records

pCloud WP Backup
Author
ploudapp
pCloud WP Backup The pCloud WP Backup plugin was created to help you backup everything on your blog with just one click and store it in the cloud in the most secure way possible. Just create an account select a backup schedule, and we will take care of the rest. The backup is done directly in the cloud, so you will have access to all your files on: Our Blog admin interface. All your other devices (laptops, smartphones, tablets etc.) or via https://www.pcloud.com Why you should always have a backup of your website and all its assets Backups are the ultimate insurance for your website. They ensure that if something were to happen, and you lost all data on it including backup files (which should be regularly updated), then at least one copy of everything would still exist so an emergency situation can easily be resolved with little downtime or disruption. Just set and forget with pCloud WP Backup. The plugin will backup all your important files automatically, so you can focus on what really matters! Restoring backups The plugin can not only create backups but if something goes wrong with your website it can restore a previous version in just one click Security To guarantee your file’s safety, pCloud WP Backup uses TLS/SSL encryption, applied when information is transferred from your website to the pCloud servers. At pCloud data security is our top priority, and we do our best to apply first class safety measures. With pCloud, your files are stored on at least three server locations in a highly secure data storage area. Optionally, you can subscribe for pCloud Crypto and have your most important files encrypted and password protected. We provide the so called client-side encryption, which, unlike server-side encryption, means that no one, except you will, have the keys for file decryption.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C