CVE-2026-97240: WordPress StifLi Backup Tools plugin <= 2.2.7 - Sensitive Data Exposure vulnerability
Published Sep 30, 2026
·Updated
Unauthenticated Sensitive Data Exposure in StifLi Backup Tools <= 2.2.7 versions.
Affected Software
1 affected component
StifLi Backup Tools<=2.2.7
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress StifLi Backup Tools Pluginto a version that resolves this vulnerability.Fixed in 2.2.8
Event History
Sep 30, 2026
CVE Published
via MITRE·12:28 PM
Data Sourced
via MITRE·12:28 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability is unauthenticated, so an attacker does not need a WordPress account or other prior privileges to exploit an affected installation.
2
What security impact is identified?
The issue is classified as sensitive data exposure with high confidentiality impact. The supplied vector indicates no integrity or availability impact.
3
Which plugin versions are affected?
StifLi Backup Tools versions up to and including 2.2.7 are identified as affected.