CVE-2026-41560
Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-06

Assigner: Patchstack

Description
Unauthenticated Broken Access Control in WXD Backup Lite <= 1.0.2 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-06
Generated
2026-10-19
AI Q&A
2026-10-06
EPSS Evaluated
2026-10-18
NVD
CVE-2026-41560
EUVD
EUVD-2026-93047

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
wxdlabs WXD Backup Lite n/a

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an unauthenticated broken access control vulnerability in the WXD Backup Lite WordPress plugin versions 1.0.2 and below. It allows unauthenticated users to access restricted pages or perform unauthorized actions without needing credentials.

Detection Guidance

Check if the WXD Backup Lite plugin version 1.0.2 or below is installed on your WordPress site. Inspect server logs for unauthorized access attempts or unusual activity in restricted areas.

Impact Analysis

An attacker could exploit this to access sensitive data or perform actions they shouldn't be able to. Since no authentication is required, the risk of unauthorized access is high, potentially leading to data breaches or other security incidents.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations using this plugin may face legal and regulatory penalties if data is exposed.

Mitigation Strategies

Immediately update the WXD Backup Lite plugin to the latest version if available. If no patch exists, consider disabling the plugin or seeking assistance from your hosting provider or developer for alternative solutions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-41560. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart