Browse CVEs

MEDIUM 6.1 CVE-2024-1037 The All-In-One Security (AIOS) – Security and Firewall plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter i… All In One Security 5.2.6+ Fix from $1,6002024-02-07 MEDIUM 5.4 CVE-2023-5982 The UpdraftPlus: WordPress Backup & Migration Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl… Updraftplus after 1.23.10 Fix from $1,6002023-11-07 MEDIUM 6.1 CVE-2023-26530 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Paul Kehrer Updraft plugin <= 0.6.1 versions. Updraft after 0.6.1 Fix from $1,6002023-08-17 MEDIUM 6.1 CVE-2023-32960 Cross-Site Request Forgery (CSRF) vulnerability in UpdraftPlus.Com, DavidAnderson UpdraftPlus WordPress Backup Plugin <= 1.23.3 versions leads to sit… Updraftplus after 1.23.3 Fix from $1,6002023-06-22 MEDIUM 5.3 CVE-2022-4346 The All-In-One Security (AIOS) WordPress plugin before 5.1.3 leaked settings of the plugin publicly, including the used email address. All In One Security 5.1.3+ Fix from $1,6002023-01-23 MEDIUM 5.3 CVE-2022-4097 The All-In-One Security (AIOS) WordPress plugin before 5.0.8 is susceptible to IP Spoofing attacks, which can lead to bypassed security features (lik… All In One Security 5.0.8+ Fix from $1,6002022-12-12 MEDIUM 6.1 CVE-2022-0864EPSS 7% The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.22.9 does not sanitise and escape the updraft_interval parameter before outputting … Updraftplus 1.22.9+ Fix from $1,6002022-04-04 MEDIUM 6.5 CVE-2022-0633 The UpdraftPlus WordPress plugin Free before 1.22.3 and Premium before 2.22.3 do not properly validate a user has the required privileges to access a… Updraftplus 1.22.3 / 2.22.3+ Fix from $1,6002022-02-17 MEDIUM 6.1 CVE-2021-25089 The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraft_restore parameter before outputting … Updraftplus 1.16.69+ Fix from $1,6002022-02-01 MEDIUM 6.1 CVE-2021-25022 The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.66 does not sanitise and escape the backup_timestamp and job_id parameter before… Updraftplus 1.16.66+ Fix from $1,6002022-01-03 MEDIUM 6.1 CVE-2017-18593 The updraftplus plugin before 1.13.5 for WordPress has XSS in rare cases where an attacker controls a string logged to a log file. Updraftplus 1.13.5+ Fix from $1,6002019-08-28 MEDIUM 6.1 CVE-2015-9360 The updraftplus plugin before 1.9.64 for WordPress has XSS via add_query_arg() and remove_query_arg(). Updraftplus 1.9.64+ Fix from $1,6002019-08-28 HIGH 8.1 CVE-2017-16870 The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the updraft_ajax_handler function in /wp-content/plugins/updraftplus/admin.php via a… Updraftplus after 1.13.12 Fix from $1,9502017-11-17 HIGH 8.1 CVE-2017-16871 The UpdraftPlus plugin through 1.13.12 for WordPress allows remote PHP code execution because the plupload_action function in /wp-content/plugins/upd… Updraftplus after 1.13.12 Fix from $1,9502017-11-17