CVE-2021-25089

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraftrestore parameter before outputting it back in the Restore page, leading to a Reflected Cross-Site Scripting...

PT-2022-9645

Name of the Vulnerable Software and Affected Versions UpdraftPlus WordPress Backup Plugin versions prior to 1.16.69 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the updraft restore parameter is not properly sanitised and escaped before being...