Known vulnerabilities in the Updraftplus plugin

10 security advisories have been published for the Updraftplus plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.

Updraftplus - Remote Code Execution (CVE-2026-10795) HIGH 2026-06-11
Updraftplus - Cross-Site Scripting (XSS) (CVE-2025-0215) MEDIUM 2025-01-15
Updraftplus - PHP Object Injection (CVE-2024-10957) HIGH 2025-01-04
Updraftplus - Cross-Site Request Forgery (CSRF) (CVE-2023-5982) MEDIUM 2023-11-07
Updraftplus - Cross-Site Request Forgery (CSRF) (CVE-2023-32960) HIGH 2023-06-22
Updraftplus - Cross-Site Scripting (XSS) (CVE-2022-0864) MEDIUM 2022-04-04
Updraftplus - Security Vulnerability (CVE-2022-0633) MEDIUM 2022-02-17
Updraftplus - Cross-Site Scripting (XSS) (CVE-2021-25089) MEDIUM 2022-02-01
Updraftplus - Cross-Site Scripting (XSS) (CVE-2021-24423) MEDIUM 2022-01-24
Updraftplus - Cross-Site Scripting (XSS) (CVE-2021-25022) MEDIUM 2022-01-03

Browse the full threat database

WordPress security that blocks attacks before they land.

sales@hackhalt.com

© Hack Halt Inc. All rights reserved.