CVE-2026-76549
UpdraftPlus < 1.26.7 - Backup Restoration via CSRF
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make a logged in admin restore an existing backup, reverting the site's database and files to an earlier state, via a crafted link.
| Vendor | unknown |
| Product | updraftplus: wp backup & migration plugin |
| Published | Aug 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown updraftplus: wp backup & migration plugin
Be the first to know when new unknown vulnerabilities affecting unknown updraftplus: wp backup & migration plugin are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / UpdraftPlus: WP Backup & Migration Plugin
0 < 1.26.7
References
Credits
Jashid Sany WPScan