EUVD-2026-57087
GHSA-9629-rv6j-mh73
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD vector omits I:H and A:H; forced site restore explicitly overwrites live files and database, confirming full integrity and availability loss alongside confidentiality breach.
Primary rating from Vendor (WPScan).
CVSS VectorVendor: WPScan
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
4DescriptionCVE.org
The Total Upkeep WordPress plugin before 1.17.3 does not adequately protect the secret that authorizes its backup-restore functionality and exposes it to unauthenticated users, allowing them to disclose sensitive backup information and to force a full site restore that overwrites the live site's files and database.
AnalysisAI
Unauthenticated exposure of the backup authorization secret in Total Upkeep WordPress plugin (all versions before 1.17.3) enables remote attackers to both exfiltrate sensitive backup archives and trigger arbitrary full-site restores that overwrite live site files and the database. WPScan disclosed a publicly available proof-of-concept exploit, and SSVC rates the attack as automatable, creating conditions for mass exploitation campaigns. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions are required for the information disclosure path: the backup authorization secret is accessible to unauthenticated remote attackers (AV:N/AC:L/PR:N/UI:N) against any default installation of Total Upkeep before 1.17.3 on a network-reachable WordPress site. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The NVD-provided CVSS 7.5 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) is assessed as materially incomplete: the CVE description explicitly states attackers can force a full site restore that overwrites live site files and the database, which maps to I:H and A:H impacts not reflected in the official score. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An unauthenticated attacker runs an automated scanner against WordPress sites, identifies installations running Total Upkeep below 1.17.3, and retrieves the exposed authorization secret from an unprotected endpoint - a step fully automatable per SSVC. Using the secret, the attacker downloads the latest backup archive, extracting database credentials, WordPress secret keys, and all site source code from a single request. … |
| Remediation | Upgrade Total Upkeep to version 1.17.3 or later immediately; the vendor patch is confirmed available. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all WordPress installations running Total Upkeep and verify current versions; within 7 days, apply vendor patch by upgrading all instances to version 1.17.3 or later (prioritize production sites); within 30 days, audit backup access logs for unauthorized activity and implement network-level restrictions on backup authorization secret exposure.
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Total Upkeep
View allThe Total Upkeep WordPress backup plugin through version 1.14.9 exposes backup file locations via env-info.php and resto
Unauthenticated broken access control in BoldGrid's Total Upkeep WordPress backup plugin (versions up to and including 1
The Total Upkeep - WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Remo
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in BoldGrid Total Upkeep al
The Total Upkeep - WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Remo
The Total Upkeep - WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Serv
The Total Upkeep plugin for WordPress is vulnerable to information disclosure in versions up to, and including 1.14.13.
Same weakness CWE-200 – Information Exposure
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today