Not rated
CVE-2022-0864 The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.22.9 does not sanitise and escape the updraft_interval…
Description
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.22.9 does not sanitise and escape the updraft_interval parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting (XSS) vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| UpdraftPlus WordPress Backup Plugin 1.22 | earliest → < 1.22.9 | 1.22.9 |
Other CVEs of UpdraftPlus WordPress Backup Plugin
The 4 CVEs of UpdraftPlus WordPress Backup Plugin →
CVE-2021-25089
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraft_restore…
Not rated
CVE-2021-24423
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.6.59 does not sanitise its updraft_service settings,…
Not rated
CVE-2021-25022
The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.66 does not sanitise and escape the…
6.1
Medium