Skip to content
OpenAdvisories

Product · davidanderson

UpdraftPlus: WP Backup & Migration Plugin

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2025-0215

    UpdraftPlus - Backup/Restore <= 1.24.12 - Reflected Cross-Site Scripting

    The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the showdata and initiate_restore parameters in all versions up to, and including, 1.24.12 due to insufficient input sanitization and output…

    davidanderson UpdraftPlus: WP Backup & Migration Plugin Web / CMS
  • Medium 5.4
    CVE-2023-5982

    UpdraftPlus <= 1.23.10 - Cross-Site Request Forgery to Google Drive Storage Update

    The UpdraftPlus: WordPress Backup & Migration Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.23.10. This is due to a lack of nonce validation and insufficient validation of the instance_id on th…

    davidanderson UpdraftPlus: WP Backup & Migration Plugin Web / CMS