DaftPlug vulnerabilities

Products

• Progressify - Progressive Web App (PWA) 1
• Snapshotify – All-in-One Backup & Restore & Migrate 1

Latest DaftPlug CVEs

Newest publication first

1. CVE-2026-42413 WordPress Snapshotify – All-in-One Backup & Restore & Migrate plugin <= 1.3.2 - Sensitive Data Exposure vulnerability

   Published 2026-10-06

   High·CVSS 7.5 EPSS 0.30%

   Unauthenticated Sensitive Data Exposure in Snapshotify – All-in-One Backup & Restore & Migrate <= 1.3.2 versions.

2. CVE-2026-32570 WordPress Progressify - Progressive Web App (PWA) plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

   Published 2026-10-06

   High·CVSS 7.1 EPSS 0.23%

   Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA) <= 1.6.0 versions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.