Plugin icon

Companion Auto Update

companion-auto-update

Vulnerabilities:

3

Last Updated:

March 21, 2026

Active Installs:

50000

Published
Title
Fixed in
CVSS
Published
2025-07-14
Title
Companion Auto Update < 3.9.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via update_delay_days parameter
Fixed in
Fixed in 3.9.3
CVSS
5.5 (medium)
Published
2019-01-14
Title
Companion Auto Update <= 3.3.5 - Authenticated SQL Injection
Fixed in
Fixed in 3.3.6
CVSS
n/a
Published
2018-10-02
Title
Companion Auto Update <= 3.2.0 - CSRF & LFI
Fixed in
Fixed in 3.2.1
CVSS
9.8 (critical)