Updraftplus CVE-2023-32960

The UpdraftPlus plugin through 1.13.12 for WordPress allows remote PHP code execution because the plupload_action functi

The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the updraft_ajax_handler function in /wp-content/plugin

Remote code execution in UpdraftPlus: WP Backup & Migration Plugin for WordPress (versions ≤1.26.4) allows unauthenticat

The UpdraftPlus WordPress plugin Free before 1.22.3 and Premium before 2.22.3 do not properly validate a user has the re

The WP-Optimize WordPress plugin before 3.2.13, SrbTransLatin WordPress plugin before 2.4.1 use a third-party library th

The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.22.9 does not sanitise and escape the updraft_interval

The All-In-One Security (AIOS) WordPress plugin before 5.0.8 is susceptible to IP Spoofing attacks, which can lead to by

The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not limit what log files to display in it's settings p

The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not escape the content of log files before outputting

The WP-Optimize WordPress plugin before 4.2.0 does not properly escape user input when checking image compression statu

The All-In-One Security (AIOS) - Security and Firewall plugin for WordPress is vulnerable to Reflected Cross-Site Script

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low at