Pricing
Case studies
Login
Start trial
UpdraftPlus
David Anderson / Team Updraft
Developer
1.26.2
Latest version
3,000,000
Installations
No date
Last updated
WordPress Plugin
No VDP
See changelog
Claim ownership
Report vulnerability
Vulnerabilities
Security Contributors
Vulnerability history
0 present
14 patched
8 Mitigation rules
WordPress UpdraftPlus - Backup/Restore plugin <= 1.24.12 - Reflected Cross-Site Scripting vulnerability
<= 1.24.12
15/01/2025
PHP Object Injection vulnerability
<= 1.24.11
06/01/2025
Cross-Site Request Forgery to Google Drive Storage Update vulnerability
<= 1.23.10
07/11/2023
CSRF lead to wp-admin Site Wide XSS vulnerability
<= 1.23.3
18/05/2023
Broken Access Control Vulnerability
1.22.14-1.23.2
16/03/2023
Broken Access Control Vulnerability
2.22.14-2.23.2
16/03/2023
Information Disclosure
<= 1.22.24
09/03/2023
Reflected Cross-Site Scripting (XSS) vulnerability
<= 1.22.8
10/03/2022
Arbitrary Backup Downloads vulnerability
<= 1.22.1
17/02/2022
Reflected Cross-Site Scripting (XSS) vulnerability
<= 1.16.66
28/12/2021
Reflected Cross-Site Scripting (XSS) vulnerability
<= 1.16.65
06/12/2021
Local File Inclusion (LFI) vulnerability
<= 1.16.58
12/07/2021
Cross Site Scripting
<= 1.9.6.3
20/04/2015
Privilege Escalation
<= 1.9.50
03/02/2015