Medium · 5.4 CVE-2023-23640 EUVD-2023-27727GHSA-ghgw-m72f-xx8v

WordPress MainWP UpdraftPlus Extension Plugin <= 4.0.6 - Subscriber+ Arbitrary Plugin Activation Vulnerability

Published Jun 9, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in MainWP MainWP UpdraftPlus Extension.This issue affects MainWP UpdraftPlus Extension: from n/a through 4.0.6.

Vendor	Product	Affected	Fixed
MainWP	MainWP UpdraftPlus Extension	≤ 4.0.6	—