UpdraftPlus: WP Backup & Migration Plugin vulnerabilities

2 known vulnerabilities in UpdraftPlus: WP Backup & Migration Plugin from Davidanderson. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  UpdraftPlus: WP Backup & Migration Plugin: Improper Verification of Cryptographic Signature

  CVE-2026-10795Jun 11, 2026DavidandersonEPSS 4.31%

  The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.26.4 via the UpdraftPlus_Remote_Communications_V2::wp_loaded function. This is due to insufficient validation of t

• 8.8 High severity

  UpdraftPlus: WP Backup & Migration Plugin: Deserialization of Untrusted Data

  CVE-2024-10957Jan 4, 2025Davidanderson

  The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions from 1.23.8 to 1.24.11 via deserialization of untrusted input in the 'recursive_unserialized_replace' function. This makes it possible for