Cyberdesu

**Name of the Vulnerable Software and Affected Versions** Backup and Staging by WP Time Capsule versions prior to 1.22.27 **Description** Authenticated users with subscriber-level access and above can cause sensitive information exposure through the `download recent decrypted file wptc` function. This allows attackers to download the most recently decrypted SQL database backup, which often contains user credentials, password hashes, and site configuration data stored in the `recent decrypted file` option. This issue is only exploitable if an administrator has previously performed a decryption action, resulting in the decrypted SQL backup file being stored in the plugin upload directory. **Recommendations** Update to a version newer than 1.22.26. As a temporary mitigation, restrict user roles from accessing the `download recent decrypted file wptc` function.