PT-2026-48532

🗓️ 10 Jun 2026 00:00:00Reported by Positive TechnologiesType

Critical UpdraftPlus bypass CVE-2026-10795 affects versions up to 1.26.4; update to 1.26.5 and UpdraftCentral 0.8.32+.

Reporter	Title	Published	Views	Family All 17
GithubExploit	Exploit for CVE-2026-10795	11 Jun 202614:19	–	githubexploit
GithubExploit	Exploit for CVE-2026-10795	15 Jun 202605:06	–	githubexploit
GithubExploit	Exploit for CVE-2026-10795	11 Jun 202610:06	–	githubexploit
Circl	CVE-2026-10795	10 Jun 202618:53	–	circl
CNNVD	WordPress plugin UpdraftPlus: WP Backup & Migration Plugin 数据伪造问题漏洞	11 Jun 202600:00	–	cnnvd
CVE	CVE-2026-10795	11 Jun 202605:34	–	cve
Cvelist	CVE-2026-10795 UpdraftPlus: WP Backup & Migration Plugin <= 1.26.4 - Unauthenticated Authentication Bypass via UpdraftCentral udrpc	11 Jun 202605:34	–	cvelist
EUVD	EUVD-2026-36215	11 Jun 202605:34	–	euvd
Kitploit	CVE-2026-10795	22 Sep 202611:32	–	kitploit
Kitploit	CVE-2026-10795	21 Sep 202600:21	–	kitploit

Source	Link
plugins	www.plugins.svn.wordpress.org/updraftplus/tags/1.26.4/vendor/team-updraft/common-libs/src/updraft-rpc/class-udrpc.php
twitter	www.twitter.com/infoflowcloud/status/2065089524103893084
t	www.t.me/cveNotify/167060
plugins	www.plugins.trac.wordpress.org/changeset/3561938/updraftplus/trunk/vendor/team-updraft/common-libs/src/updraft-rpc/class-udrpc2.php
reddit	www.reddit.com/r/StopBadBots/comments/1u2c3b5/a_wordpress_plugin_with_over_3_million_active
plugins	www.plugins.svn.wordpress.org/updraftplus/tags/1.26.4/vendor/team-updraft/common-libs/src/updraft-rpc/class-udrpc2.php
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-10795
twitter	www.twitter.com/integ_sec/status/2075583547159486844
twitter	www.twitter.com/CVEnew/status/2065087760130511039
twitter	www.twitter.com/AndreGironda/status/2065094293728170004

08 Sep 2026 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.18.1

EPSS0.03578

SSVC