Vulnerabilities / UpdraftPlus
UpdraftPlus vulnerabilities
Advisories WPSec published for UpdraftPlus: WP Backup & Migration Plugin. Other sources may list more. Its attack surface: UpdraftPlus on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-21 | WPSEC-2026-1273 | UpdraftPlus <= 1.26.12 - Unauthenticated Continued Access via Unrevoked Compromised UpdraftCentral Keys | High 8.1 | 1.26.13 |
| 2026-10-17 | WPSEC-2026-1205 | UpdraftPlus <= 1.26.10 - Unauthenticated SQL Injection via Database Restore | High 7.5 | 1.26.11 |
| 2026-10-16 | WPSEC-2026-1109 | UpdraftPlus <= 1.26.9 - Unauthenticated SQL Injection via Database Restore | High 7.5 | 1.26.10 |
| 2026-10-15 | WPSEC-2026-1035 | UpdraftPlus <= 1.26.8 - Unauthenticated SQL Injection via Database Restore | High 7.5 | 1.26.9 |
License: CC BY 4.0