Updraftplus vulnerabilities

Products

• Updraftplus 11
• All-in-one Security 5
• Wp-optimize 2

Newest

• unknown wp-optimize WP-Optimize < 4.2.0 - Admin+ SQLi CVE-2025-3951 4.1 MediumJune 2, 2025
• davidanderson all-in-one security (aios) – security and firewall, updraftplus all-in-one security +1 more All-In-One Security (AIOS) – Security and Firewall <= 5.2.5 - Reflected Cross-Site Scripting CVE-2024-1037 6.1 MediumFebruary 7, 2024
• updraftplus, davidanderson updraftplus: wp backup & migration plugin +1 more UpdraftPlus <= 1.23.10 - Cross-Site Request Forgery to Google Drive Storage Update CVE-2023-5982 5.4 MediumNovember 7, 2023
• paul kehrer updraft WordPress Updraft Plugin <= 0.6.1 is vulnerable to Cross Site Scripting (XSS) CVE-2023-26530 7.1 HighAugust 17, 2023
• oblak studio srbtranslatin, unknown wp-optimize +1 more Multiple Plugins - Cross-Site Scripting From Third-party Library CVE-2023-1119 6.1 MediumJuly 10, 2023
• unknown updraftplus wordpress backup plugin, updraftplus +1 more WordPress UpdraftPlus Plugin <= 1.23.3 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-32960 7.1 HighJune 22, 2023
• unknown all-in-one security (aios), updraftplus all-in-one security +1 more All-In-One Security (AIOS) < 5.1.5 - Admin+ Stored XSS CVE-2023-0157 Public exploit EPSS 32.5% 4.8 MediumApril 10, 2023
• unknown all-in-one security (aios), updraftplus all-in-one security +1 more All-In-One Security (AIOS) < 5.1.5 - Admin+ Arbitrary File/Folder Access via Traversal CVE-2023-0156 Public exploit EPSS 19.9% 4.9 MediumApril 10, 2023
• unknown all-in-one security (aios), updraftplus all-in-one security +1 more All In One WP Security & Firewall < 5.1.3 - Configuration Leak CVE-2022-4346 5.3 MediumJanuary 23, 2023
• unknown all-in-one security (aios), updraftplus all-in-one security +1 more All In One WP Security & Firewall < 5.0.8 - IP Spoofing CVE-2022-4097 5.3 MediumDecember 12, 2022
• unknown updraftplus wordpress backup plugin, updraftplus +1 more UpdraftPlus < 1.22.9 - Reflected Cross-Site Scripting CVE-2022-0864 6.1 MediumApril 4, 2022
• updraftplus, updraftplus wordpress backup plugin (free), wordpress backup plugin (premium) +2 more UpdraftPlus Free < 1.22.3 & Premium < 2.22.3 - Subscriber+ Backup Download CVE-2022-0633 6.5 MediumFebruary 17, 2022
• unknown updraftplus wordpress backup plugin, updraftplus +1 more UpdraftPlus < 1.16.69 - Reflected Cross-Site Scripting CVE-2021-25089 6.1 MediumFebruary 1, 2022
• unknown updraftplus wordpress backup plugin, updraftplus +1 more UpdraftPlus < 1.16.59 - Admin+ Stored Cross-Site Scripting CVE-2021-24423 4.8 MediumJanuary 24, 2022
• unknown updraftplus wordpress backup plugin, updraftplus +1 more UpdraftPlus < 1.16.66 - Reflected Cross-Site Scripting CVE-2021-25022 6.1 MediumJanuary 3, 2022
• updraftplus The updraftplus plugin before 1.9.64 for WordPress has XSS via add_query_arg() and... CVE-2015-9360 6.1 MediumAugust 28, 2019
• updraftplus The updraftplus plugin before 1.13.5 for WordPress has XSS in rare cases where an attacker... CVE-2017-18593 6.1 MediumAugust 28, 2019
• updraftplus ** DISPUTED ** The UpdraftPlus plugin through 1.13.12 for WordPress allows remote PHP code... CVE-2017-16871 Disputed 8.1 HighNovember 17, 2017
• updraftplus ** DISPUTED ** The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the... CVE-2017-16870 Disputed 8.1 HighNovember 17, 2017