Skip to content
OpenAdvisories

Vendor

revmakx

19 known vulnerabilities.

Products

Backup and Staging by WP Time Capsule 7 InfiniteWP Client 5 WPCal.io – Easy Meeting Scheduler 2 WP Duplicate 2 WP Duplicate – WordPress Migration Plugin 1 WPCal.io 1 DefendWP Firewall 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.6
    CVE-2026-74011

    WordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection. This issue affects InfiniteWP Client: from n/a through 1.13.9.

    revmakx InfiniteWP Client
  • High 7.5
    CVE-2026-42760

    WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.25 - Broken Authentication vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Password Recovery Exploitation.This issue affects Backup and Staging by WP Time Capsule: from n/a through <= 1.22.25.

    revmakx Backup and Staging by WP Time Capsule
  • High 8.8
    CVE-2026-1499

    WP Duplicate <= 1.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via 'process_add_site' AJAX Action

    The WP Duplicate plugin for WordPress is vulnerable to Missing Authorization leading to Arbitrary File Upload in all versions up to and including 1.1.8. This is due to a missing capability check on the `process_add_site()` AJAX action combined with path trave…

    revmakx WP Duplicate – WordPress Migration Plugin Web / CMS
  • High 7.1
    CVE-2025-47477

    WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.23 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Reflected XSS.This issue affects Backup and Staging by WP Time Capsule: from n/a through…

    revmakx Backup and Staging by WP Time Capsule
  • High 7.6
    CVE-2025-22280

    WordPress DefendWP Firewall Plugin <= 1.1.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in revmakx DefendWP Firewall defend-wp-firewall allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DefendWP Firewall: from n/a through <= 1.1.0.

    revmakx DefendWP Firewall
  • High 7.2
    CVE-2024-49684

    WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Object Injection.This issue affects Backup and Staging by WP Time Capsule: from n/a through <= 1.22.21.

    revmakx Backup and Staging by WP Time Capsule
  • High 8.5
    CVE-2024-48020

    WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows SQL Injection.This issue affects Backup and Staging by WP Time Capsule: from n/a through…

    revmakx Backup and Staging by WP Time Capsule
  • High 7.5
    CVE-2023-2916 Public exploit EPSS 24%

    InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure

    The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.11.1 via the 'admin_notice' function. This can allow authenticated attackers with subscriber-level permissions or above to extract s…

    revmakx InfiniteWP Client Web / CMS