CVE-2026-8996

Name of the Vulnerable Software and Affected Versions Backup and Staging by WP Time Capsule versions prior to 1.22.27

Description Authenticated users with subscriber-level access and above can cause sensitive information exposure through the download recent decrypted file wptc function. This allows attackers to download the most recently decrypted SQL database backup, which often contains user credentials, password hashes, and site configuration data stored in the recent decrypted file option. This issue is only exploitable if an administrator has previously performed a decryption action, resulting in the decrypted SQL backup file being stored in the plugin upload directory.

Recommendations Update to a version newer than 1.22.26. As a temporary mitigation, restrict user roles from accessing the download recent decrypted file wptc function.