updraftplus

暂无产品描述。

updraftpluswordpress

关联漏洞

共找到 4 条公开漏洞记录

高危CVE-2026-107952026/06/25

UpdraftPlus WP Backup & Migration Plugin - Authentication Bypass

UpdraftPlus WP Backup & Migration Plugin for WordPress <= 1.26.4 contains an authentication bypass caused by insufficient validation in UpdraftPlus_Remote_Communications_V2::wp_loaded, letting unauthenticated attackers execute arbitrary RPC commands as admin, exploit requires no authentication.

updraftplusPoC 已收录

CVSS—

低危2026/01/14

WordPress UpdraftPlus - Full Path Disclosure

WordPress Plugin UpdraftPlus files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly.

updraftplusPoC 已收录

CVSS—

中危CVE-2022-08642022/04/05

UpdraftPlus < 1.22.9 - Cross-Site Scripting

The plugin does not sanitise and escape the updraft_interval parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting (XSS) vulnerability.

updraftplusPoC 已收录

CVSS6.1EPSS 2.8%

低危2020/07/26

UpdraftPlus Plugin Pem Key

UpdraftPlus wordpress plugin private key leaked with directory listing.

updraftplusPoC 已收录

CVSS—