UP
Product
Updraftplus
by Updraftplus · last CVE Nov 7, 2023
11
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 9Low 0
Watch

Add Updraftplus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-16871
8.1
2%
Nov 17
The UpdraftPlus plugin through 1.13.12 for WordPress allows remote PHP code execution because the plupload_action function in /wp-content/plugins/updraftplus/admin.php has a race…
Affected: through 1.13.12
CVE-2017-16870
8.1
1%
Nov 17
The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the updraft_ajax_handler function in /wp-content/plugins/updraftplus/admin.php via an httpget subaction
Affected: through 1.13.12
Showing 2