Vendor

    UpdraftPlus

    19 known vulnerabilities in products by UpdraftPlus, 0 of them actively exploited (CISA KEV).

    Key figures

    19

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in UpdraftPlus
    MediumCVE-2023-0157

    All-In-One Security (AIOS) < 5.1.5 - Admin+ Stored XSS

    		4.8
    MediumCVE-2023-0156

    All-In-One Security (AIOS) < 5.1.5 - Admin+ Arbitrary File/Folder Access via Traversal

    		4.9
    MediumCVE-2022-0864

    UpdraftPlus < 1.22.9 - Reflected Cross-Site Scripting

    		6.1
    HighCVE-2017-16871

    UpdraftPlus: Race Condition

    		8.1
    MediumCVE-2022-0633

    UpdraftPlus Free < 1.22.3 & Premium < 2.22.3 - Subscriber+ Backup Download

    		6.5
    MediumCVE-2023-1119

    Multiple Plugins - Cross-Site Scripting From Third-party Library

    also in 1 other product

    		6.1
    HighCVE-2017-16870

    UpdraftPlus: Server-Side Request Forgery (SSRF)

    		8.1
    MediumCVE-2021-25022

    UpdraftPlus < 1.16.66 - Reflected Cross-Site Scripting

    		6.1
    MediumCVE-2015-9360

    UpdraftPlus: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2017-18593

    UpdraftPlus: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2021-25089

    UpdraftPlus < 1.16.69 - Reflected Cross-Site Scripting

    		6.1
    MediumCVE-2024-1037

    All-In-One Security (AIOS) – Security and Firewall <= 5.2.5 - Reflected Cross-Site Scripting

    also in 1 other product

    		6.1
    MediumCVE-2022-4346

    All In One WP Security & Firewall < 5.1.3 - Configuration Leak

    		5.3
    MediumCVE-2022-4097

    All In One WP Security & Firewall < 5.0.8 - IP Spoofing

    		5.3
    HighCVE-2023-26530

    WordPress Updraft Plugin <= 0.6.1 is vulnerable to Cross Site Scripting (XSS)

    		7.1
    MediumCVE-2021-24423

    UpdraftPlus < 1.16.59 - Admin+ Stored Cross-Site Scripting

    		4.8
    HighCVE-2023-32960

    WordPress UpdraftPlus Plugin <= 1.23.3 is vulnerable to Cross Site Request Forgery (CSRF)

    		7.1
    MediumCVE-2025-3951

    WP-Optimize < 4.2.0 - Admin+ SQLi

    		4.1
    MediumCVE-2023-5982

    UpdraftPlus <= 1.23.10 - Cross-Site Request Forgery to Google Drive Storage Update

    also in 1 other product

    		5.4

    Products

    Products by UpdraftPlus
    UpdraftPlus WordPress Backup Plugin110
    All-In-One Security (AIOS)50