Product by Davidanderson
Updraftplus: Wp Backup & Migration Plugin
4 known vulnerabilities in Updraftplus: Wp Backup & Migration Plugin (Davidanderson), 0 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-10795 | Davidanderson UpdraftPlus: Improper Verification of Cryptographic Signature | 8.1 | |
| High | CVE-2024-10957 | UpdraftPlus: WP Backup & Migration Plugin 1.23.8 - 1.24.11 - Unauthenticated PHP Object Injection | 8.8 | |
| Medium | CVE-2025-0215 | UpdraftPlus - Backup/Restore <= 1.24.12 - Reflected Cross-Site Scripting | 6.1 | |
| Medium | CVE-2023-5982 | UpdraftPlus <= 1.23.10 - Cross-Site Request Forgery to Google Drive Storage Update | 5.4 |