Known vulnerabilities in UpdraftPlus WordPress Backup Plugin

Software CPE: cpe:2.3:a:davidanderson:updraftplus:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting UpdraftPlus WordPress Backup Plugin UpdraftPlus WordPress Backup Plugin is affected by 4 known vulnerabilities: 4 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103282 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-0215
CWE-79 Low
No
No
1.25.1 24.01.2025 SB2025012424
#VU82970 - Cross-Site Request Forgery (CSRF)
CVE-2023-5982
CWE-352 Low
No
No
1.23.11 10.11.2023 SB2023111024
#VU60760 - Improper Authorization
CVE-2022-0633
CWE-285 Low
No
No
1.22.3 22.02.2022 SB2022022215
#VU20607 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-18593
CWE-79 Low
No
No
1.13.5 02.09.2019 SB2017080837