https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T09:36:29.802343+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-363372 EUVD-2026-363372 2026-10-06T09:36:29.805414+00:00 EUVD-2026-363372 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16253 fkie_cve-2026-16253 2026-10-06T09:36:29.805448+00:00

The Total Upkeep WordPress plugin before 1.17.3 does not adequately protect the secret that authorizes its backup-restore functionality and exposes it to unauthenticated users, allowing them to disclose sensitive backup information and to force a full site restore that overwrites the live site's files and database. This is an incomplete fix of CVE-2020-36848, as the protection added at the time never took effect on distributed copies of the plugin.

 https://cve.radiocsirt.org/vuln/ghsa-9629-rv6j-mh73 GHSA-9629-rv6j-mh73 2026-10-06T09:36:29.805481+00:00

The Total Upkeep WordPress plugin before 1.17.3 does not adequately protect the secret that authorizes its backup-restore functionality and exposes it to unauthenticated users, allowing them to disclose sensitive backup information and to force a full site restore that overwrites the live site's files and database.