CVE-2026-86827

The BackWPup WordPress plugin (versions 3.3 through 5.7.6 ) contains a vulnerability where it fails to verify if requests to its cron-triggered backup execution handler originate from the internal WordPress scheduled-event dispatch. This allows unauthenticated attackers to force any existing back...