PULSEUnderground Intel

LIVE31signals / 24h

FEED

ransomtermite reclama a JD Young · CN · Not Foundransomanubis reclama a Coca-Cola / Fairlife · US · Agriculture and Food Productionransomsafepay reclama a zinorm.de · DE · Not Foundransomsafepay reclama a moebelmayer.de · DE · Retail & E-Commerceransomsafepay reclama a paritaet-nrw.org · DE · Professional Servicesransomsafepay reclama a haugbuersten.de · DE · Retail & E-Commerceransomsafepay reclama a landesmuseum.de · DE · Educationransomsafepay reclama a hst.eu · DE · Not Foundransomsafepay reclama a braywoodschool.co.uk · GB · Educationransomsafepay reclama a weier.org · DE · Not Foundransomsafepay reclama a bnpdist.com · US · Retail & E-Commerceransomnightspire reclama a Kates Nussman Ellis Earle & Landolfi LLP · US · Professional Servicesransomchaos reclama a vit-best.com · RU · Educationransomshinyhunters reclama a RingCentral, Inc. · US · Technologyransomtermite reclama a JD Young · CN · Not Foundransomanubis reclama a Coca-Cola / Fairlife · US · Agriculture and Food Productionransomsafepay reclama a zinorm.de · DE · Not Foundransomsafepay reclama a moebelmayer.de · DE · Retail & E-Commerceransomsafepay reclama a paritaet-nrw.org · DE · Professional Servicesransomsafepay reclama a haugbuersten.de · DE · Retail & E-Commerceransomsafepay reclama a landesmuseum.de · DE · Educationransomsafepay reclama a hst.eu · DE · Not Foundransomsafepay reclama a braywoodschool.co.uk · GB · Educationransomsafepay reclama a weier.org · DE · Not Foundransomsafepay reclama a bnpdist.com · US · Retail & E-Commerceransomnightspire reclama a Kates Nussman Ellis Earle & Landolfi LLP · US · Professional Servicesransomchaos reclama a vit-best.com · RU · Educationransomshinyhunters reclama a RingCentral, Inc. · US · Technology

CVE WatchJul 27, 2026

CVE-2026-65443

Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions.

CVSS

7.1

High

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Jul 27, 2026 · Last modified: Jul 27, 2026 · CWE-79

EPSS · 30d

Not enough EPSS history yet.

Technical description

Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions.

Official references

patchstack.comhttps://patchstack.com/database/wordpress/plugin/backwpup/vulnerability/wordpress-backwpup-plugin-5-7-4-cross-site-scripting-xss-vulnerability?_s_id=cve

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-654486.5 MED

———Unauthenticated Cross Site Scripting (XSS) in Anti Spam and list cleaner – AcyChecker <= 1.8.1 versions.3h CVE-2026-654477.1 HIG

———Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.3h CVE-2026-654467.1 HIG

———Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.3h CVE-2026-654417.1 HIG

———Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.3h CVE-2026-654407.1 HIG

———Unauthenticated Cross Site Scripting (XSS) in GetGenie <= 4.4.3 versions.3h CVE-2026-654397.1 HIG

———Unauthenticated Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <=3.5.45 versions.3h