Total Upkeep WordPress Backup Plugin Server-Side Request Forgery Vulnerability

A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid, affecting all versions through 1.16.8. This vulnerability allows authenticated attackers with Administrator-level access to make web requests to arbitrary locations from the web application, potentially querying and modifying information from internal services.

Impact

Exploitation of this vulnerability could lead to unauthorized web requests being made from the WordPress application, allowing attackers to access or alter information from internal services.

Remediation

Users are advised to update the plugin to version 1.16.9 or a newer patched version.