Vulnerability index

Browse CVEs

14 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

All In One Security MEDIUM 6.1
CVE-2024-1037

The All-In-One Security (AIOS) – Security and Firewall plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter i…

Fix: 5.2.6+
Fix from $1,600 2024-02-07
Updraftplus MEDIUM 5.4
CVE-2023-5982

The UpdraftPlus: WordPress Backup & Migration Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl…

Fix: after 1.23.10
Fix from $1,600 2023-11-07
Updraft MEDIUM 6.1
CVE-2023-26530

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Paul Kehrer Updraft plugin <= 0.6.1 versions.

Fix: after 0.6.1
Fix from $1,600 2023-08-17
Updraftplus MEDIUM 6.1
CVE-2023-32960

Cross-Site Request Forgery (CSRF) vulnerability in UpdraftPlus.Com, DavidAnderson UpdraftPlus WordPress Backup Plugin <= 1.23.3 versions leads to sit…

Fix: after 1.23.3
Fix from $1,600 2023-06-22
All In One Security MEDIUM 5.3
CVE-2022-4346

The All-In-One Security (AIOS) WordPress plugin before 5.1.3 leaked settings of the plugin publicly, including the used email address.

Fix: 5.1.3+
Fix from $1,600 2023-01-23
All In One Security MEDIUM 5.3
CVE-2022-4097

The All-In-One Security (AIOS) WordPress plugin before 5.0.8 is susceptible to IP Spoofing attacks, which can lead to bypassed security features (lik…

Fix: 5.0.8+
Fix from $1,600 2022-12-12
Updraftplus MEDIUM 6.1
CVE-2022-0864EPSS 7%

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.22.9 does not sanitise and escape the updraft_interval parameter before outputting …

Fix: 1.22.9+
Fix from $1,600 2022-04-04
Updraftplus MEDIUM 6.5
CVE-2022-0633

The UpdraftPlus WordPress plugin Free before 1.22.3 and Premium before 2.22.3 do not properly validate a user has the required privileges to access a…

Fix: 1.22.3 / 2.22.3+
Fix from $1,600 2022-02-17
Updraftplus MEDIUM 6.1
CVE-2021-25089

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraft_restore parameter before outputting …

Fix: 1.16.69+
Fix from $1,600 2022-02-01
Updraftplus MEDIUM 6.1
CVE-2021-25022

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.66 does not sanitise and escape the backup_timestamp and job_id parameter before…

Fix: 1.16.66+
Fix from $1,600 2022-01-03
Updraftplus MEDIUM 6.1
CVE-2017-18593

The updraftplus plugin before 1.13.5 for WordPress has XSS in rare cases where an attacker controls a string logged to a log file.

Fix: 1.13.5+
Fix from $1,600 2019-08-28
Updraftplus MEDIUM 6.1
CVE-2015-9360

The updraftplus plugin before 1.9.64 for WordPress has XSS via add_query_arg() and remove_query_arg().

Fix: 1.9.64+
Fix from $1,600 2019-08-28
Updraftplus HIGH 8.1
CVE-2017-16870

The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the updraft_ajax_handler function in /wp-content/plugins/updraftplus/admin.php via a…

Fix: after 1.13.12
Fix from $1,950 2017-11-17
Updraftplus HIGH 8.1
CVE-2017-16871

The UpdraftPlus plugin through 1.13.12 for WordPress allows remote PHP code execution because the plupload_action function in /wp-content/plugins/upd…

Fix: after 1.13.12
Fix from $1,950 2017-11-17