tag
Plugin-Upload
Critical
UpdraftPlus WordPress Plugin — Unauthenticated RPC Key Bypass to Admin Creation & RCE (CVE-2026-10795)
CVE-2026-10795·
UpdraftPlus (WordPress backup plugin) — UpdraftCentral remote RPC feature
unpatched
Critical
Budibase Authentication Bypass to Plugin-Upload Reverse Shell — CVE-2026-31816
CVE-2026-31816·
Budibase (low-code platform)
unpatched