WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
updraftplus
Published
2015-02-03
Title
UpdraftPlus <= 1.9.50 - Privilege Escalation via Nonce Leakage
Slug
updraftplus
Published
2015-04-20
Title
Updraftplus < 1.9.64 - XSS
Slug
updraftplus
Published
2017-08-08
Title
Updraftplus < 1.13.5 - XSS
Slug
updraftplus
Published
2021-12-06
Title
UpdraftPlus < 1.16.66 - Reflected Cross-Site Scripting
Slug
updraftplus
Published
2021-12-28
Title
UpdraftPlus < 1.16.69 - Reflected Cross-Site Scripting
Slug
updraftplus
Published
2021-05-09
Title
UpdraftPlus < 1.6.59 - Admin+ Stored Cross-Site Scripting
Slug
updraftplus
Published
2021-07-12
Title
UpdraftPlus < 1.16.59 - Admin+ Local File Inclusion
Slug
updraftplus
Published
2022-02-17
Title
UpdraftPlus Free < 1.22.3 & Premium < 2.22.3 - Subscriber+ Backup Download
Slug
updraftplus
Published
2022-03-10
Title
UpdraftPlus < 1.22.9 - Reflected Cross-Site Scripting
Slug
updraftplus
Published
2023-05-18
Title
UpdraftPlus < 1.23.4 - CSRF
Slug
updraftplus
Published
2023-11-07
Title
UpdraftPlus: WordPress Backup & Migration < 1.23.11 - Google Drive Storage Update via CSRF
Slug
updraftplus
Published
2025-01-03
Title
UpdraftPlus < 1.24.12 - Unauthenticated PHP Object Injection
Slug
updraftplus
Published
2025-01-15
Title
UpdraftPlus - Backup/Restore < 1.25.1 - Reflected XSS
Slug
updraftplus
Published
2026-06-10
Title
UpdraftPlus < 1.26.5 - Unauthenticated Authentication Bypass via UpdraftCentral udrpc
Slug
updraftplus
Published
2026-08-25
Title
UpdraftPlus < 1.26.7 - Backup Restoration via CSRF
Slug
updraftplus
Published
2026-09-25
Title
UpdraftPlus 1.23.8 - 1.26.7 - Subscriber+ Remote Storage Credential Disclosure via Migration Notice
Slug
updraftplus
Published
2026-09-25
Title
UpdraftPlus 1.23.8 - 1.26.7 - Subscriber+ Remote Storage Credential Disclosure via Migration Notice
Slug
uper-elementor
Published
2026-01-10
Title
Uper for Elementor <= 1.0.5 - Missing Authorization
Slug
upfiv-complete-all-in-one-seo-wizard
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
upfiv-complete-all-in-one-seo-wizard
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
upi-qr-code-payment-for-woocommerce
Published
2026-01-23
Title
UPI QR Code Payment Gateway for WooCommerce < 1.6.1 - Missing Authorization
Slug
upi-qr-code-payment-for-woocommerce
Published
2026-06-19
Title
UPI QR Code Payment Gateway for WooCommerce < 1.6.3 - Missing Authorization
Slug
upi-qr-code-payment-for-woocommerce
Published
2026-10-22
Title
UPI QR Code Payment Gateway for WooCommerce < 1.7.0 - Missing Authorization
Slug
upi-qr-code-payment-gateway
Published
2026-10-02
Title
UPI QR Code Payment Gateway < 1.4.4 - Unauthenticated Cross-Order Payment-Status Forgery
Slug
upload-am-file-hosting-vpn
Published
2025-09-29
Title
Upload.am < 1.0.1 - Contributor+ Arbitrary Option Update