PT-2017-14607 · WordPress · Updraftplus

Name of the Vulnerable Software and Affected Versions: UpdraftPlus plugin versions 1.13.12 and earlier Description: The issue concerns a Server-Side Request Forgery SSRF in the updraft ajax handler function, located in /wp-content/plugins/updraftplus/admin.php, which can be exploited via an httpg...

CVE-2017-16870: Server-Side Request Forgery (SSRF)

The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the updraftajaxhandler function in /wp-content/plugins/updraftplus/admin.php via an httpget subaction. NOTE: the vendor reports that this does not cross a privilege boundary...

wordpress plugin updraftplus ssrf

No description provided by source...

wordpress plugin updraftplus arbitrary file upload

No description provided by source...

SSRF Vulnerability in Wordpress updraftplus Plugin

Wordpress updraftplus is a plugin that assists Wordpress users in backing up their websites, allowing them to back up their entire site to various clouds. An SSRF vulnerability exists in the Wordpress updraftplus plugin. The vulnerability is due to admin.php script updraftajaxhandler function uri...

WordPress updraftplus plugin has a file upload vulnerability

Wordpress updraftplus is a plugin that assists Wordpress users in backing up their websites by backing up the entire site to the cloud. A file upload vulnerability exists in the WordPress updraftplus plugin. An attacker can exploit this vulnerability to directly upload php files and gain control ...

Updraftplus < 1.13.5 - XSS

The UpdraftPlus WordPress Backup Plugin WordPress plugin was affected by a XSS security vulnerability...

WordPress UpdraftPlus Backup & Restoration Plugin <= 1.9.6.3 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability, because of the misuse of the addqueryarg and removequeryarg functions. Solution Update the plugin...

UpdraftPlus Backup & Restoration <= 1.9.6.3 - Cross-Site Scripting (XSS)

The Updraft WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Updraftplus < 1.9.64 - XSS

The UpdraftPlus WordPress Backup Plugin WordPress plugin was affected by a XSS security vulnerability...

WordPress UpdraftPlus Credentials Disclosure

Credentials disclosure vulnerability in WordPress UpdraftPlus plugin Vulnerability Type: Unknown For the exploit source code contact DSquare Security sales team...

UpdraftPlus <= 1.9.50 - Privilege Escalation via Nonce Leakage

The UpdraftPlus WordPress Backup Plugin WordPress plugin was affected by a Privilege Escalation via Nonce Leakage security vulnerability...

WordPress UpdraftPlus Plugin <= 1.9.50 - Privilege Escalation

This plugin is prone to a privilege escalation vulnerability. Solution Upgrade the plugin...