WebTotem Backups

WebTotem Backups has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of November 2026. Their average CVSS score is 8.1, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Improper Limitation Of A Pathname To A Restricted Directory, behind 1 of the records (100%).

The one issue recorded for WebTotem Backups has a vendor fix available, so running the current release closes it.

All of these findings were reported by João Ramos Maciel. WebTotem Backups is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.4.

Strategic Overview

Avg CVSSHigh

8.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WebTotem Backups vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.1CVE-2026-77006

WebTotem Backups < 1.1.0 - Authenticated (Subscriber+) Arbitrary File Deletion

Read the full analysis

Vulnerability Records

1 records


2026-09-10 00:00	WebTotem Backups < 1.1.0 - Authenticated (Subscriber+) Arbitrary File Deletion WebTotem Backups < 1.1.0	`CVE-2026-77006`	8.1 High	João Ramos Maciel	Yes

Showing 1–1 of 1 reports

Latestv1.1.1

WebTotem Backups

Author

WebTotem

0.0(0)

0/100

Last Updated

2026-09-15 (2mo ago)

Active Installs

10+

Downloads

1,706

Requires WP

6.2+

Requires PHP

7.4+

Tested up to

WP 7.1.4

Created

2024-07-02 (2y ago)

WebTotem Backups – this plugin provides a set of tools for creating, managing, and restoring backups of your website. It is a reliable WordPress plugin designed for secure and fast recovery of your website’s stable version Key features: Backup Creation: WebTotem Backups allows you to easily create regular backups of your website. You can choose what data to include in the backup, including the database, files, plugins, and themes. Secure Restoration: WebTotem Backups provides an intuitive interface for safely and easily restoring your website from a backup. You can restore the entire website. Remote Storage: The plugin allows you to send your backups to remote storage via FTP or Google Drive. This provides an additional layer of data loss protection. Backup to Dropbox and other file storage options will be available soon. With WebTotem Backups, you can confidently focus on developing your website, knowing that your data is always protected and available for recovery when needed.” External services This plugin uses a number of external services to initiate payments. These are documented below with a link to the service’s Terms of Use. Google Drive API This plugin enables users to create backups and utilizes the Google API for remote backup storage. The documentation for Google Drive API can be found at https://developers.google.com/drive/api/guides/about-sdk?hl=en, Google API Services User Data Policy can be found at https://developers.google.com/terms/api-services-user-data-policy This link is used for authorization with Google API https://www.googleapis.com. Dropbox API Also this plugin facilitates the creation of backups and leverages the Dropbox API for storing backups remotely. The documentation for Dropbox API can be found at https://www.dropbox.com/developers/documentation/http/documentation, Dropbox Privacy Policy can be found at https://www.dropbox.com/en/privacy This link is used for authorization with Dropbox API https://api.dropboxapi.com. Additionally, we use our resource for token generation https://wtotem.com/oauth/.

View on WordPress.org