Lucene search
+L

17 matches found

Cvelist
Cvelist
•added 2026/10/08 6:00 a.m.•48 views

CVE-2026-86827 BackWPup 3.3 - 5.7.6 - Unauthenticated Backup Job Execution via wp-cron.php

The BackWPup WordPress plugin before 5.7.7 does not verify that a request to its cron-triggered backup execution handler actually originates from WordPress's internal scheduled-event dispatch, allowing unauthenticated attackers to force any existing backup job to run immediately, independent of i...

0.00218EPSS
SaveExploits0References1
Rows per page
Query Builder