This vulnerability in revmakx Backup and Staging by WP Time Capsule allows an attacker to bypass authentication by exploiting the password recovery mechanism. The bug permits an unauthenticated user to trigger the password recovery workflow and obtain elevated access, effectively compromising account integrity. The weakness is identified as CWE-288 (Authenticated Access to Sensitive Resource Without Authorization).

The affected product is the WP Time Capsule plugin for WordPress by revmakx, versions 1.22.25 and older. The issue applies to all website instances using these plugin versions that have the password recovery feature enabled.

The vulnerability carries a CVSS score of 7.5, reflecting a high severity level. There is no EPSS score available, so current exploitation probability cannot be quantified; however, the flaw is publicly documented and could be leveraged remotely via the web interface. It is not listed in CISA's KEV catalog, but its impact on authentication undermines trust and could lead to privilege escalation. Attackers would likely need only a valid email address registered on the site or guessable user information to initiate the password recovery flow, and then exploit the server’s lack of proper verification to obtain administrative access.