Security Advisory

CVE-2026-76549

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-27 06:00:18

Last updated 2026-08-27 14:23:47

Assigner WPScan

CVSS score 5.9

State PUBLISHED

Description

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make a logged in admin restore an existing backup, reverting the site's database and files to an earlier state, via a crafted link.

← Browse all CVEs View on cve.org ↗