UpdraftPlus: WordPress Backup Plugin with Authentication Bypass Vulnerability
UpdraftPlus is a popular WordPress backup plugin. It has a high-severity authentication bypass vulnerability (CVE-2026-10795) that may have been used as an…
Tag: CVE-2026-10795
Supply Chain Attack Hits Three WordPress Plugins: PushEngage, OptinMonster, TrustPulse Backdoored
An attacker tampered with trusted JavaScript files used by WordPress sites running PushEngage, OptinMonster, and TrustPulse, turning those files into a way…
UpdraftPlus Authentication Bypass Vulnerability (CVE-2026-10795)
A high-severity authentication bypass vulnerability in the UpdraftPlus WordPress backup plugin, rated 8.1 by Wordfence. It is now patched and has been…