cbcvebase.

Updraftplus Wordpress Backup Plugin vulnerabilities

1 known vulnerability affecting updraftplus/updraftplus_wordpress_backup_plugin.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2022-0633P2MEDIUMCVSS 6.5Exploited≥ 1.22.3, < 1.22.3≥ 2.22.3, < 2.22.32022-02-17
CVE-2022-0633 [MEDIUM] CWE-863 CVE-2022-0633: The UpdraftPlus WordPress plugin Free before 1.22.3 and Premium before 2.22.3 do not properly valida The UpdraftPlus WordPress plugin Free before 1.22.3 and Premium before 2.22.3 do not properly validate a user has the required privileges to access a backup's nonce identifier, which may allow any users with an account on the site (such as subscriber) to download the most recent site & database backup.
nvd
Updraftplus Wordpress Backup Plugin vulnerabilities | cvebase