WordPress Plugin Vulnerabilities

UpdraftPlus <= 1.9.50 - Privilege Escalation via Nonce Leakage

Description

The UpdraftPlus WordPress Backup Plugin WordPress plugin was affected by a Privilege Escalation via Nonce Leakage security vulnerability.

Affects Plugins

Plugin icon
updraftplus
Fixed in 1.9.51

References

URL
https://blog.sucuri.net/2015/02/advisory-dangerous-nonce-leak-in-updraftplus.html
URL
http://updraftplus.com/updraftplus-1-9-51-important-security-update/

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
60937de9-c1e7-417d-8465-e1721d7de9e9

Timeline

Publicly Published
2015-02-03 (about 11 years ago)
Added
2015-02-03 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2015-04-05
Title
WordPress Video Gallery <= 2.8 - Unprotected Mail Page
Published
2020-02-25
Title
Flexible Checkout Fields for WooCommerce < 2.3.2 - Unauthenticated Settings Update
Published
2016-04-01
Title
Stop User Enumeration <= 1.3.3 - Username Enumeration Bypass
Published
2021-08-19
Title
WP Cerber Security < 8.9.3 - 2FA Authentication Bypass
Published
2016-03-03
Title
Antioch Theme - Arbitrary File Download