181 matches found
CVE-2017-16870
The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the updraftajaxhandler function in /wp-content/plugins/updraftplus/admin.php via an httpget subaction. NOTE: the vendor reports that this does not cross a privilege boundary...
Cross site scripting
DISPUTED The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the updraftajaxhandler function in /wp-content/plugins/updraftplus/admin.php via an httpget subaction. NOTE: the vendor reports that this does not cross a privilege boundary...
Race condition
DISPUTED The UpdraftPlus plugin through 1.13.12 for WordPress allows remote PHP code execution because the pluploadaction function in /wp-content/plugins/updraftplus/admin.php has a race condition before deleting a file associated with the name parameter. NOTE: the vendor reports that this does n...
CVE-2017-16870
The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the updraftajaxhandler function in /wp-content/plugins/updraftplus/admin.php via an httpget subaction. NOTE: the vendor reports that this does not cross a privilege boundary...
CVE-2017-16871
The CVE-2017-16871 entry concerns the WordPress UpdraftPlus plugin (versions up to 1.13.12). A race condition in the plupload_action function, before deleting a file tied to the name parameter in /wp-content/plugins/updraftplus/admin.php, allows remote PHP code execution. The vendor notes this do...
CVE-2017-16871
The UpdraftPlus plugin through 1.13.12 for WordPress allows remote PHP code execution because the pluploadaction function in /wp-content/plugins/updraftplus/admin.php has a race condition before deleting a file associated with the name parameter. NOTE: the vendor reports that this does not cross ...
CVE-2017-16870
The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the updraftajaxhandler function in /wp-content/plugins/updraftplus/admin.php via an httpget subaction. NOTE: the vendor reports that this does not cross a privilege boundary...
CVE-2017-16870
CVE-2017-16870 affects WordPress UpdraftPlus plugin up to version 1.13.12. The vulnerability is a server-side request forgery (SSRF) in the updraft_ajax_handler function of /wp-content/plugins/updraftplus/admin.php, exploitable via an httpget subaction. The vendor notes that this does not cross a...
PT-2017-14608 · WordPress · Updraftplus
Name of the Vulnerable Software and Affected Versions: UpdraftPlus plugin versions 1.13.12 and earlier Description: The issue allows remote PHP code execution due to a race condition in the plupload action function before deleting a file associated with the name parameter in...
PT-2017-14607 · WordPress · Updraftplus
Name of the Vulnerable Software and Affected Versions: UpdraftPlus plugin versions 1.13.12 and earlier Description: The issue concerns a Server-Side Request Forgery SSRF in the updraft ajax handler function, located in /wp-content/plugins/updraftplus/admin.php, which can be exploited via an httpg...
wordpress plugin updraftplus ssrf
No description provided by source...
SSRF Vulnerability in Wordpress updraftplus Plugin
Wordpress updraftplus is a plugin that assists Wordpress users in backing up their websites, allowing them to back up their entire site to various clouds. An SSRF vulnerability exists in the Wordpress updraftplus plugin. The vulnerability is due to admin.php script updraftajaxhandler function uri...
wordpress plugin updraftplus arbitrary file upload
No description provided by source...
WordPress updraftplus plugin has a file upload vulnerability
Wordpress updraftplus is a plugin that assists Wordpress users in backing up their websites by backing up the entire site to the cloud. A file upload vulnerability exists in the WordPress updraftplus plugin. An attacker can exploit this vulnerability to directly upload php files and gain control ...
Updraftplus < 1.13.5 - XSS
The UpdraftPlus WordPress Backup Plugin WordPress plugin was affected by a XSS security vulnerability...
WordPress UpdraftPlus Backup & Restoration Plugin <= 1.9.6.3 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability, because of the misuse of the addqueryarg and removequeryarg functions. Solution Update the plugin...
UpdraftPlus Backup & Restoration <= 1.9.6.3 - Cross-Site Scripting (XSS)
The Updraft WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Updraftplus < 1.9.64 - XSS
The UpdraftPlus WordPress Backup Plugin WordPress plugin was affected by a XSS security vulnerability...
