UpdraftPlus: WordPress Backup & Migration Plugin Archives

CVE-2026-10795: Unauthenticated Authentication Bypass via UpdraftCentral udrpc in UpdraftPlus

Skrevet den 5. august 2026 af i UpdraftPlus: WordPress Backup & Migration Plugin

CVE-2026-10795: Unauthenticated Authentication Bypass via UpdraftCentral udrpc in UpdraftPlus

This vulnerability affects the following application versions:

UpdraftPlus: WordPress Backup & Migration Plugin 1.24.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.25.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.25.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.25.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.25.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.25.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.25.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.25.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.25.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.26.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.26.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.26.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.26.4

Cross-site scripting through unescaped output in admin-facing templates

Skrevet den 28. maj 2026 af i UpdraftPlus: WordPress Backup & Migration Plugin

The plugin emits several PHP-generated values directly into HTML and inline JavaScript contexts without applying context-appropriate escaping, allowing attacker-influenced data to break out of the surrounding string or markup and execute arbitrary script in an authenticated user’s browser. Affected sinks include option keys and values rendered into an admin table via htmlspecialchars() (which is not charset-aware and is weaker than WordPress’s esc_html()), as well as URLs and nonces interpolated into inline onclick handlers without esc_js(), leaving the JavaScript string literal vulnerable to quote- or backslash-based breakout. Exploitation requires that a value reaching one of these sinks be controllable by a lower-privileged user or external input, after which a logged-in administrator viewing the affected page would trigger script execution in their session context.

This vulnerability affects the following application versions:

UpdraftPlus: WordPress Backup & Migration Plugin 1.23.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.13
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.11

Cross-Site Scripting (XSS) in UpdraftPlus

Skrevet den 1. april 2026 af i UpdraftPlus: WordPress Backup & Migration Plugin

A cross-site scripting (XSS) vulnerability was discovered in UpdraftPlus versions prior to 1.24.9. This vulnerability allows an attacker to inject malicious scripts through improperly sanitized input, potentially leading to session hijacking, data theft, or other malicious actions.

This vulnerability affects the following application versions:

UpdraftPlus: WordPress Backup & Migration Plugin 1.23.13
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.7

Insecure deserialization and unauthorized plugin deactivation

Skrevet den 24. marts 2026 af i UpdraftPlus: WordPress Backup & Migration Plugin

The restored_plugins() function contains multiple security vulnerabilities including insecure deserialization of untrusted data and insufficient authorization checks for plugin deactivation operations.

This vulnerability affects the following application versions:

UpdraftPlus: WordPress Backup & Migration Plugin 1.23.13
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.6

Reflected cross-site scripting in multiple admin modules

Skrevet den 18. februar 2026 af i UpdraftPlus: WordPress Backup & Migration Plugin

Multiple admin modules in UpdraftPlus did not properly escape output before rendering in HTML. This could allow attackers to inject malicious scripts via crafted

input or error responses, potentially leading to script execution in the administrator’s browser.

This vulnerability affects the following application versions:

UpdraftPlus: WordPress Backup & Migration Plugin 1.16.20
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.21
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.22
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.23
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.24
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.25
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.26
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.28
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.29
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.32
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.34
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.35
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.36
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.37
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.40
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.41
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.42
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.43
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.44
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.45
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.46
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.47
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.48
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.49
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.50
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.51
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.53
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.55
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.56
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.59
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.60
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.61
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.62
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.63
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.64
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.65
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.66
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.67
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.68
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.69
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.14
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.17
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.18
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.19
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.20
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.21
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.22
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.23
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.24
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.13
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.11

Cross-site Scripting in admin notices

Skrevet den 18. februar 2026 af i UpdraftPlus: WordPress Backup & Migration Plugin

Cross-site Scripting in admin notices

This vulnerability affects the following application versions:

UpdraftPlus: WordPress Backup & Migration Plugin 1.13.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.13.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.13.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.13.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.13.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.13.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.13.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.13.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.13
UpdraftPlus: WordPress Backup & Migration Plugin 1.15.0
UpdraftPlus: WordPress Backup & Migration Plugin 1.15.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.15.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.15.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.15.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.15.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.0
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.13
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.14
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.17
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.20
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.21
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.22
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.23
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.24
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.25
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.26
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.28
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.29
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.32
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.34
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.35
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.36
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.37
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.40
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.41
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.42
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.43
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.44
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.45
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.46
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.47
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.48
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.49
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.50
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.51
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.53
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.55
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.56
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.59
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.60
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.61
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.62
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.63
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.64
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.65
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.66
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.67
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.68
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.69
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.14
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.17
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.18
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.19
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.20
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.21
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.22
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.23
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.24
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.13
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.11

Cross-site scripting via insufficient output escaping in admin templates

Skrevet den 18. februar 2026 af i UpdraftPlus: WordPress Backup & Migration Plugin

Multiple admin template files fail to properly escape dynamic content before output, allowing cross-site scripting (XSS) attacks. Unescaped variables including nonces, URLs, and user-supplied text are directly echoed in JavaScript handlers, HTML attributes, and content. An attacker could inject malicious scripts through filter hooks, potentially compromising administrator sessions. The fix implements appropriate WordPress escaping functions for each output context.

This vulnerability affects the following application versions:

UpdraftPlus: WordPress Backup & Migration Plugin 1.13.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.13.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.13.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.13.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.13.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.13.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.13.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.13.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.14.13
UpdraftPlus: WordPress Backup & Migration Plugin 1.15.0
UpdraftPlus: WordPress Backup & Migration Plugin 1.15.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.15.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.15.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.15.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.15.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.0
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.13
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.14
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.17
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.20
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.21
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.22
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.23
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.24
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.25
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.26
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.28
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.29
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.32
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.34
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.35
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.36
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.37
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.40
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.41
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.42
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.43
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.44
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.45
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.46
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.47
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.48
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.49
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.50
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.51
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.53
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.55
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.56
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.59
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.60
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.61
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.62
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.63
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.64
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.65
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.66
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.67
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.68
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.69
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.14
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.17
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.18
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.19
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.20
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.21
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.22
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.23
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.24
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.13
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.11

Reflected cross-site scripting in multiple remote storage modules

Skrevet den 12. februar 2026 af i UpdraftPlus: WordPress Backup & Migration Plugin

Multiple remote storage modules in UpdraftPlus did not properly escape output before rendering in HTML. Affected files include the S3, OpenStack

base, template, and insufficient PHP handlers. User-controllable data such as CSS classes, URLs, storage method names, error messages, exception details, HTTP

response codes, and PHP version information were echoed directly without sanitization. This could allow attackers to inject malicious scripts via crafted

input or error responses, potentially leading to script execution in the administrator’s browser.

This vulnerability affects the following application versions:

UpdraftPlus: WordPress Backup & Migration Plugin 1.22.24
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.13
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.11

Multiple cross-site scripting vulnerabilities in plugin admin templates

Skrevet den 12. februar 2026 af i UpdraftPlus: WordPress Backup & Migration Plugin

Multiple Cross-Site Scripting (XSS) vulnerabilities were identified across eight template files in the UpdraftPlus WordPress backup plugin’s admin interface due to insufficient output escaping. These vulnerabilities could allow authenticated attackers with administrative access to inject malicious scripts through various vectors including URLs, form inputs, plugin settings, and dynamic content rendering. Affected components include the premium add-ons page, backup management interface, migration tools, UpdraftCentral connection forms, file upload modals, navigation tabs, and header elements. The vulnerabilities were remediated by implementing proper WordPress escaping functions (esc_url(), esc_html(), esc_attr(), wp_kses(), and wp_kses_post()) throughout all affected template files.

This vulnerability affects the following application versions:

UpdraftPlus: WordPress Backup & Migration Plugin 1.16.59
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.60
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.61
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.62
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.63
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.64
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.65
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.66
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.67
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.68
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.69
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.14
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.17
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.18
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.19
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.20
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.21
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.22
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.23
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.24
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.13
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.11

Multiple cross-site scripting vulnerabilities due to insufficient output escaping

Skrevet den 3. februar 2026 af i UpdraftPlus: WordPress Backup & Migration Plugin

Multiple files contain insufficient output escaping, allowing potential Cross-Site Scripting (XSS) attacks. User-controlled data, exception messages, URLs, and JavaScript contexts were not properly sanitized before output, enabling attackers to inject malicious scripts

This vulnerability affects the following application versions:

UpdraftPlus: WordPress Backup & Migration Plugin 1.23.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.13
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.11

Multiple instances of reflected/stored XSS resulting from unescaped output in HTML contexts

Skrevet den 3. februar 2026 af i UpdraftPlus: WordPress Backup & Migration Plugin

This vulnerability affects the following application versions:

UpdraftPlus: WordPress Backup & Migration Plugin 1.23.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.13
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.11

XSS via search/replace section

Skrevet den 3. februar 2026 af i UpdraftPlus: WordPress Backup & Migration Plugin

The updraft plus search/replace section was not properly sanitized or escaped to prevent an XSS attack.

This vulnerability affects the following application versions:

UpdraftPlus: WordPress Backup & Migration Plugin 1.16.60
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.61
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.62
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.63
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.64
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.65
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.66
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.67
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.68
UpdraftPlus: WordPress Backup & Migration Plugin 1.16.69
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.14
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.17
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.18
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.19
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.20
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.21
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.22
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.23
UpdraftPlus: WordPress Backup & Migration Plugin 1.22.24
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.11
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.12
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.13
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.15
UpdraftPlus: WordPress Backup & Migration Plugin 1.23.16
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.1
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.2
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.3
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.4
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.5
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.6
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.7
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.8
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.9
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.10
UpdraftPlus: WordPress Backup & Migration Plugin 1.24.11

Reflected cross-site scripting via the showdata and initiate_restore parameters

Skrevet den 12. maj 202518. oktober 2025 af i UpdraftPlus: WordPress Backup & Migration Plugin

Due to insufficient input sanitization and output escaping, it is possible for unauthenticated attackers to inject arbitrary web scripts into pages. These scripts can execute if the attacker successfully tricks an admin user into performing an action, such as clicking a link.

This vulnerability affects the following application versions: