zupt

Project archived. For newest versions and updates check it out. Compress everything. Trust nothing. Encrypt always...

CVE-2026-78495: Server-Side Request Forgery (SSRF)

A server-side request forgery SSRF vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...

The vulnerability of the Backup component in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, allows a hacker to trigger a service failure.

The vulnerability of the Backup component in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to cause service interruptions...

CVE-2026-78495 Dimension Server-Side Request Forgery via Remote Backup Connection Test

A server-side request forgery SSRF vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...

CVE-2026-78495 Dimension Server-Side Request Forgery via Remote Backup Connection Test

A server-side request forgery SSRF vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems...

CVE-2026-78195

...

CVE-2026-78195

CVE-2026-78195 was rejected as a duplicate of CVE-2026-78047. The underlying vulnerability is a Cross-Site Scripting (XSS) flaw in the WatchGuard Dimension Backup Historical Data feature, which allows an authenticated administrator to execute arbitrary JavaScript in another user's browser. No spe...

CVE-2026-78495

A server-side request forgery (SSRF) vulnerability in the WatchGuard Dimension product, specifically in the Remote Backup Connection Test configuration, allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems. The CVSS 4.0 score is 5.3 (MEDIUM...

CVE-2026-76549

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make a logged in admin restore an existing backup, reverting the site's database and files to an earlier state, via a...

CVE-2026-19454

The JetBackup WordPress plugin before 3.1.23.5 does not perform its multisite authorisation check before serving backup archives and job logs, allowing an administrator of the network's main site who is not a Super Admin to download a full backup of the entire network, including every site's data...

CVE-2026-76549 UpdraftPlus < 1.26.7 - Backup Restoration via CSRF

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make a logged in admin restore an existing backup, reverting the site's database and files to an earlier state, via a...

CVE-2026-76549 UpdraftPlus < 1.26.7 - Backup Restoration via CSRF

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make a logged in admin restore an existing backup, reverting the site's database and files to an earlier state, via a...

EUVD-2026-66877

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make a logged in admin restore an existing backup, reverting the site's database and files to an earlier state, via a...

WordPress UpdraftPlus: WP Backup & Migration Plugin plugin < 1.26.7 - Backup Restoration vulnerability

Backup Restoration vulnerability discovered by Jashid Sany in WordPress Plugin UpdraftPlus versions 1.26.7...

CVE-2026-76549

The UpdraftPlus: WP Backup & Migration Plugin for WordPress (versions before 1.26.7 ) is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists because the plugin lacks proper CSRF checks in one of its backup management actions. An attacker could trick a logged-in administrator into ...

WordPress JetBackup plugin 3.1.18.8-3.1.23.3 - Admin+ Multisite Network Backup Download vulnerability

Admin+ Multisite Network Backup Download vulnerability discovered by Akshat Parikh SN1PER in WordPress Plugin Backup Guard versions 3.1.18.8-3.1.23.3...

EUVD-2026-66875

The JetBackup WordPress plugin before 3.1.23.5 does not perform its multisite authorisation check before serving backup archives and job logs, allowing an administrator of the network's main site who is not a Super Admin to download a full backup of the entire network, including every site's data...

CVE-2026-19454

The JetBackup WordPress plugin (versions prior to 3.1.23.5 ) contains an incorrect authorization flaw. The plugin fails to perform a proper multisite authorization check before serving backup archives and job logs. This allows an administrator of the network's main site who lacks Super Admin priv...

CVE-2026-19454 JetBackup 3.1.18.8 - 3.1.23.3 - Admin+ Multisite Network Backup Download

The JetBackup WordPress plugin before 3.1.23.5 does not perform its multisite authorisation check before serving backup archives and job logs, allowing an administrator of the network's main site who is not a Super Admin to download a full backup of the entire network, including every site's data...

CVE-2026-19454 JetBackup 3.1.18.8 - 3.1.23.3 - Admin+ Multisite Network Backup Download

The JetBackup WordPress plugin before 3.1.23.5 does not perform its multisite authorisation check before serving backup archives and job logs, allowing an administrator of the network's main site who is not a Super Admin to download a full backup of the entire network, including every site's data...