Not rated

CVE-2021-25089 The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraft_restore…

Description

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraft_restore parameter before outputting it back in the Restore page, leading to a Reflected Cross-Site Scripting

Affected products and versions

Product	Affected versions	Fixed in
UpdraftPlus WordPress Backup Plugin 1.16	earliest → < 1.16.69	1.16.69

The 4 CVEs of UpdraftPlus WordPress Backup Plugin →

CVE-2022-0864 The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.22.9 does not sanitise and escape the updraft_interval… Not rated CVE-2021-24423 The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.6.59 does not sanitise its updraft_service settings,… Not rated CVE-2021-25022 The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.66 does not sanitise and escape the… 6.1 Medium

Do you use UpdraftPlus WordPress Backup Plugin?

Track this CVE Watch UpdraftPlus WordPress Backup Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2021-25089

Timeline

Published February 1, 2022
Last modified August 3, 2024

References

wpscan.com wpscan.com

Track this CVE

CVE-2021-25089 The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraft_restore…

Description

Affected products and versions

Other CVEs of UpdraftPlus WordPress Backup Plugin