Updraftplus Wordpress Backup Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:updraftplus_wordpress_backup_plugin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Updraftplus Wordpress Backup Plugin (60380045-fcf0-564c-989e-955b850cb5c9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-0864 |
vulnerable | 2026-06-08 05:39:11.374223 |
UpdraftPlus < 1.22.9 - Reflected Cross-Site Scripting
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.22.9 does not sanitise and escape the updraft_interval parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting (XSS) vulnerability.
Published: 2022-04-04T15:35:53.000Z
Updated: 2024-08-02T23:40:04.563Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25089 |
vulnerable | 2026-06-08 05:30:39.943497 |
UpdraftPlus < 1.16.69 - Reflected Cross-Site Scripting
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraft_restore parameter before outputting it back in the Restore page, leading to a Reflected Cross-Site Scripting
Published: 2022-02-01T12:21:37.000Z
Updated: 2024-08-03T19:56:10.476Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25022 |
vulnerable | 2026-06-08 05:30:39.816639 |
UpdraftPlus < 1.16.66 - Reflected Cross-Site Scripting
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.66 does not sanitise and escape the backup_timestamp and job_id parameter before outputting then back in admin pages, leading to Reflected Cross-Site Scripting issues
Published: 2022-01-03T12:49:15.000Z
Updated: 2025-05-22T18:40:18.824Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24423 |
vulnerable | 2026-06-08 05:30:04.352490 |
UpdraftPlus < 1.16.59 - Admin+ Stored Cross-Site Scripting
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.6.59 does not sanitise its updraft_service settings, allowing high privilege users to set malicious JavaScript payload in it and leading to a Stored Cross-Site Scripting issue
Published: 2022-01-24T08:00:45.000Z
Updated: 2024-08-03T19:28:23.809Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.