Medium
CVE-2026-82841
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 22
Reset filters
Medium
CVE-2026-76549
UpdraftPlus: WP Backup & Migration Plugin < 1.26.7 - Cross-Site Request Forgery
Critical
CVE-2026-10795
UpdraftPlus: WP Backup & Migration Plugin <= 1.26.4 (free) < 2.26.5 (premium) - Unauthenticated Authentication Bypass via UpdraftCentral udrpc
Medium
CVE-2025-0215
UpdraftPlus - Backup/Restore <= 1.24.12 - Reflected Cross-Site Scripting
High
CVE-2024-10957
UpdraftPlus: WP Backup & Migration Plugin 1.23.8 - 1.24.11 - Unauthenticated PHP Object Injection
Medium
CVE-2023-5982
UpdraftPlus <= 1.23.10 - Cross-Site Request Forgery to Google Drive Storage Update
Medium
CVE-2023-32960
UpdraftPlus <= 1.23.3 - Cross-Site Request Forgery to Cross-Site Scripting via action_authenticate_storage
High
2e329432-c404-4312-969b-42cac345637d
UpdraftPlus 1.22.14 to 1.23.2 and UpdraftPlus (Premium) 2.22.14 to 2.23.2 - Privilege Escalation via updraft_central_ajax_handler
Medium
343cbdda-2ec5-437f-b563-96c61663314d
Updraft Plus <= 1.22.24 - Information Disclosure via updraft_ajaxrestore
High
cb105ff0-5085-4813-81a6-b1f0798d576c
MainWP (Various extensions) - Cross-Site Request Forgery
Medium
94f7f2d2-e90b-4978-bab8-eee160949567
MainWP UpdraftPlus Extension <= 4.0.6 - Missing Authorization
Medium
CVE-2023-23640
MainWP UpdraftPlus Extension <= 4.0.6 - Missing Authorization to Arbitrary Plugin Activation
Medium
CVE-2022-0864
UpdraftPlus WordPress Backup Plugin < 1.22.9 Reflected Cross-Site Scripting
Medium
CVE-2022-0633
UpdraftPlus WordPress Backup Plugin < 1.22.3 - Sensitive Information Disclosure
Medium
CVE-2021-25089
UpdraftPlus WordPress Backup Plugin <= 1.16.68 - Reflected Cross-Site Scripting via updraft_restore
Medium
CVE-2021-25022
UpdraftPlus WordPress Backup Plugin <= 1.16.65 - Reflected Cross-Site Scripting
High
40d80e47-3411-4e70-8a20-2e698daad6e7
UpdraftPlus < 1.16.59 - Authenticated (Admin+) Local File Inclusion
Medium
CVE-2021-24423
UpdraftPlus WordPress Backup Plugin < 1.6.59 - Stored Cross-Site Scripting
Medium
CVE-2015-9360
UpdraftPlus <= 1.9.63 and UpdraftPlus (paid) <= 2.9.63 - Cross-Site Scripting
Medium
CVE-2017-18593
UpdraftPlus <= 1.13.4 - Stored Cross-Site Scripting
Medium
800a06f3-8a5b-4ba1-ad16-3d3a214f372f
UpdraftPlus WordPress Backup <= 1.9.6.3 - Cross-Site Scripting
Critical
c75bfba9-b25a-4966-835c-8d22736de809
UpdraftPlus WordPress Backup Plugin <= 1.9.50 - Nonce Leak to Authorization Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.