WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
updraft
Published
2015-04-20
Title
UpdraftPlus Backup & Restoration <= 1.9.6.3 - Cross-Site Scripting (XSS)
Slug
updraft
Published
2023-04-24
Title
Updraft <= 0.6.1 - Reflected XSS
Slug
updraftplus
Published
2015-02-03
Title
UpdraftPlus <= 1.9.50 - Privilege Escalation via Nonce Leakage
Slug
updraftplus
Published
2015-04-20
Title
Updraftplus < 1.9.64 - XSS
Slug
updraftplus
Published
2017-08-08
Title
Updraftplus < 1.13.5 - XSS
Slug
updraftplus
Published
2021-12-06
Title
UpdraftPlus < 1.16.66 - Reflected Cross-Site Scripting
Slug
updraftplus
Published
2021-12-28
Title
UpdraftPlus < 1.16.69 - Reflected Cross-Site Scripting
Slug
updraftplus
Published
2021-05-09
Title
UpdraftPlus < 1.6.59 - Admin+ Stored Cross-Site Scripting
Slug
updraftplus
Published
2021-07-12
Title
UpdraftPlus < 1.16.59 - Admin+ Local File Inclusion
Slug
updraftplus
Published
2022-02-17
Title
UpdraftPlus Free < 1.22.3 & Premium < 2.22.3 - Subscriber+ Backup Download
Slug
updraftplus
Published
2022-03-10
Title
UpdraftPlus < 1.22.9 - Reflected Cross-Site Scripting
Slug
updraftplus
Published
2023-05-18
Title
UpdraftPlus < 1.23.4 - CSRF
Slug
updraftplus
Published
2023-11-07
Title
UpdraftPlus: WordPress Backup & Migration < 1.23.11 - Google Drive Storage Update via CSRF
Slug
updraftplus
Published
2025-01-03
Title
UpdraftPlus < 1.24.12 - Unauthenticated PHP Object Injection
Slug
updraftplus
Published
2025-01-15
Title
UpdraftPlus - Backup/Restore < 1.25.1 - Reflected XSS
Slug
uper-elementor
Published
2026-01-10
Title
Uper for Elementor <= 1.0.5 - Missing Authorization
Slug
upfiv-complete-all-in-one-seo-wizard
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
upfiv-complete-all-in-one-seo-wizard
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
upi-qr-code-payment-for-woocommerce
Published
2026-01-23
Title
UPI QR Code Payment Gateway for WooCommerce < 1.6.1 - Missing Authorization
Slug
upload-am-file-hosting-vpn
Published
2025-09-29
Title
Upload.am < 1.0.1 - Contributor+ Arbitrary Option Update
Slug
upload-am-file-hosting-vpn
Published
2025-09-29
Title
Upload.am File Hosting VPN < 1.0.1 - Contributor+ Arbitrary Option Disclosure
Slug
upload-fields-for-wpforms
Published
2024-06-03
Title
Upload Fields for WPForms <= 1.0.2 - Missing Authorization
Slug
upload-file-type-settings-plugin
Published
2023-02-15
Title
Upload File Type Settings <= 1.1 - Admin+ Stored XSS
Slug
upload-media-by-url
Published
2023-08-02
Title
Upload Media By URL < 1.0.8 - Stored XSS via CSRF
Slug
upload-quota-per-user
Published
2025-03-24
Title
Upload Quota per User <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting