Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp_ajax_cli_cancel' function in all versions up to, and including, 1.17.1. This makes it possible for unauthenticated attackers to cancel a pending rollback, potentially preventing a WordPress installation from automatically reverting a failed update.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-29 | 1 | PoC1 |
| 2026-05-01 | 2 | Disclosure1General1 |
CVE-2026-3143 The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c… https://www.cve.org/CVERecord?id=CVE-2026-3143
Post summary
The post signals the disclosure of CVE‑2026‑3143, a data‑modification flaw in the Total Upkeep WordPress plugin, but offers no PoC, exploit code, or patch details.
https://copy.fail/ CVE-2026-3143
Post summary
A link to https://copy.fail/ accompanies CVE‑2026‑3143, suggesting a PoC may be available, but no explicit technical or exploitation details are provided.
🚨*CVE* CVE-2026-3143 The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c… https://www.cve.org/CVERecord?id=CVE-2026-3143 ----- Traducción: CVE-2026-3143 The… http://infoflow.cloud`
Post summary
The tweet merely links to the CVE record without providing additional technical information, evidence of exploitation, or mitigation guidance.