UpdraftPlus < 1.16.69 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape the updraftrestore parameter before outputting it back in the Restore page, leading to a Reflected Cross-Site Scripting PoC...

UpdraftPlus < 1.16.69 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape the updraftrestore parameter before outputting it back in the Restore page, leading to a Reflected Cross-Site Scripting...

WordPress UpdraftPlus plugin <= 1.16.65 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Krzysztof Zając in WordPress UpdraftPlus plugin versions = 1.16.65. Solution Update the WordPress UpdraftPlus plugin to the latest available version at least 1.16.66...

UpdraftPlus < 1.16.66 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape the backuptimestamp and jobid parameter before outputting then back in admin pages, leading to Reflected Cross-Site Scripting issues PoC...

UpdraftPlus < 1.16.66 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape the backuptimestamp and jobid parameter before outputting then back in admin pages, leading to Reflected Cross-Site Scripting issues...

WordPress UpdraftPlus plugin <= 1.16.58 - Local File Inclusion (LFI) vulnerability

Local File Inclusion LFI vulnerability discovered by WPScanTeam in WordPress UpdraftPlus plugin versions = 1.16.58. Solution Update the WordPress UpdraftPlus plugin to the latest available version at least 1.16.59...

WordPress updraftplus plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. updraftplus is a WordPress backup, restore, and clone plugin used in it. A cross-site scripting vulnerability exists in WordPress...

WordPress updraftplus plugin cross-site scripting vulnerability (CNVD-2019-30397)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. updraftplus is a WordPress backup, restore, and clone plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

CVE-2017-18593

The updraftplus plugin before 1.13.5 for WordPress has XSS in rare cases where an attacker controls a string logged to a log file...

CVE-2017-18593

The updraftplus plugin before 1.13.5 for WordPress has XSS in rare cases where an attacker controls a string logged to a log file...

CVE-2015-9360

The updraftplus plugin before 1.9.64 for WordPress has XSS via addqueryarg and removequeryarg...

Design/Logic Flaw

The updraftplus plugin before 1.9.64 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9360

The CVE covers the UpdraftPlus WordPress backup plugin. Affected: UpdraftPlus plugin before version 1.9.64. Vulnerability: XSS via add_query_arg() and remove_query_arg(). Root cause: improper handling of query arguments enabling client-side script injection. Impact: cross-site scripting accessibl...

CVE-2015-9360

The updraftplus plugin before 1.9.64 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2017-18593

The CVE-2017-18593 entry affects the WordPress UpdraftPlus plugin, specifically versions prior to 1.13.5. The vulnerability is an XSS issue that occurs in rare cases when an attacker can influence a string logged to a log file, enabling client-side script execution. Affected component: UpdraftPlu...

CVE-2017-18593

The updraftplus plugin before 1.13.5 for WordPress has XSS in rare cases where an attacker controls a string logged to a log file...

WordPress UpdraftPlus Plugin Server-Side Request Forgery Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.UpdraftPlus plugin is used in one of the WordPress backup plugin. WordPress UpdraftPlus plugin 1.13.12 and earlier...

WordPress UpdraftPlus Plugin Multiple Vulnerabilities

These CVE SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.140535";...

CVE-2017-16871

The UpdraftPlus plugin through 1.13.12 for WordPress allows remote PHP code execution because the pluploadaction function in /wp-content/plugins/updraftplus/admin.php has a race condition before deleting a file associated with the name parameter. NOTE: the vendor reports that this does not cross ...

CVE-2017-16871

The UpdraftPlus plugin through 1.13.12 for WordPress allows remote PHP code execution because the pluploadaction function in /wp-content/plugins/updraftplus/admin.php has a race condition before deleting a file associated with the name parameter. NOTE: the vendor reports that this does not cross ...