Threats tagged 'ghsa-h95h-4rcc-2h4r'

CVE-2026-76549 is a Cross-Site Request Forgery (CSRF) vulnerability in the UpdraftPlus: WP Backup & Migration Plugin for WordPress. Versions before 1.26.7 lack CSRF protections in a backup management action, allowing an attacker to trick a logged-in admin into restoring a backup via a crafted link. This could revert the site's database and files to an earlier state without the admin's explicit consent.