What the vulnerability does
01Description
The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.16.8 via the 'download' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
Explanation of Vulnerability in Simple Terms
02Summary
Total Upkeep allows authenticated administrators to make the site send HTTP requests to internal or external systems on the attacker's behalf. An attacker with admin access can read sensitive data from internal services or trigger actions on external systems. The vulnerability requires high-level privileges and does not affect site availability or allow data modification.
What an attacker can do
03Attacker Capabilities
Make the site send HTTP requests to internal or external systems to read sensitive data or trigger actions.
Potential impact on your site
04Site Impact
A compromised admin account can be used to access internal services, read configuration data, or interact with external APIs on your site's behalf.
Conditions required to exploit
05Prerequisites
Attacker must have WordPress administrator privileges; no user interaction required.
Key dates
06Disclosure timeline
February 27, 2025
CVE published
April 8, 2026
Record updated
