WordPress Total Upkeep (BoldGrid Backup) plugin < 1.17.3 - Unauthenticated Sensitive Data Disclosure and Forced Site Restore via Predictable cron_secret (regression of CVE-2020-36848) vulnerability

Unauthenticated Sensitive Data Disclosure and Forced Site Restore via Predictable cronsecret regression of CVE-2020-36848 vulnerability discovered by Jakub Herman in WordPress Plugin Total Upkeep versions 1.17.3...

CVE-2026-16253

The Total Upkeep WordPress plugin (versions before 1.17.3 ) contains a vulnerability where the secret authorizing backup-restore functionality is inadequately protected. This exposure to unauthenticated users allows for the disclosure of sensitive backup information and the ability to force a ful...