PT-2025-3787 · WordPress · Updraftplus

Name of the Vulnerable Software and Affected Versions: UpdraftPlus: WP Backup & Migration Plugin versions up to 1.24.12 Description: The issue is related to Reflected Cross-Site Scripting XSS due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inje...

CVE-2025-0215: Improper Neutralization of Input During Web Page Generation

The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the showdata and initiaterestore parameters in all versions up to, and including, 1.24.12 due to insufficient input sanitization and output escaping. This makes it possible for...