214 matches found
PT-2017-14608 · WordPress · Updraftplus
Name of the Vulnerable Software and Affected Versions: UpdraftPlus plugin versions 1.13.12 and earlier Description: The issue allows remote PHP code execution due to a race condition in the plupload action function before deleting a file associated with the name parameter in...
PT-2017-14607 · WordPress · Updraftplus
Name of the Vulnerable Software and Affected Versions: UpdraftPlus plugin versions 1.13.12 and earlier Description: The issue concerns a Server-Side Request Forgery SSRF in the updraft ajax handler function, located in /wp-content/plugins/updraftplus/admin.php, which can be exploited via an httpg...
CVE-2017-16870: Server-Side Request Forgery (SSRF)
The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the updraftajaxhandler function in /wp-content/plugins/updraftplus/admin.php via an httpget subaction. NOTE: the vendor reports that this does not cross a privilege boundary...
wordpress plugin updraftplus ssrf
No description provided by source...
wordpress plugin updraftplus arbitrary file upload
No description provided by source...
SSRF Vulnerability in Wordpress updraftplus Plugin
Wordpress updraftplus is a plugin that assists Wordpress users in backing up their websites, allowing them to back up their entire site to various clouds. An SSRF vulnerability exists in the Wordpress updraftplus plugin. The vulnerability is due to admin.php script updraftajaxhandler function uri...
WordPress updraftplus plugin has a file upload vulnerability
Wordpress updraftplus is a plugin that assists Wordpress users in backing up their websites by backing up the entire site to the cloud. A file upload vulnerability exists in the WordPress updraftplus plugin. An attacker can exploit this vulnerability to directly upload php files and gain control ...
Updraftplus < 1.13.5 - XSS
The UpdraftPlus WordPress Backup Plugin WordPress plugin was affected by a XSS security vulnerability...
WordPress UpdraftPlus Backup & Restoration Plugin <= 1.9.6.3 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability, because of the misuse of the addqueryarg and removequeryarg functions. Solution Update the plugin...
UpdraftPlus Backup & Restoration <= 1.9.6.3 - Cross-Site Scripting (XSS)
The Updraft WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...
Updraftplus < 1.9.64 - XSS
The UpdraftPlus WordPress Backup Plugin WordPress plugin was affected by a XSS security vulnerability...
WordPress UpdraftPlus Credentials Disclosure
Credentials disclosure vulnerability in WordPress UpdraftPlus plugin Vulnerability Type: Unknown For the exploit source code contact DSquare Security sales team...