Is "UpdraftPlus Backup and Restoration" safe?
WordPress Plugin security and safety information.
Rating: Good (current version safe)
Recommendations
UpdraftPlus Backup and Restoration: Plugin Details
| Type: | Plugin |
| Author: | UpdraftPlus.Com, DavidAnderson |
| URL: | https://wordpress.org/plugins/updraftplus/ |
| Latest Version: | 1.24.3 |
UpdraftPlus Backup and Restoration: Security Information
| Insecure versions: | Up To 1.23.10 |
| Known since: | 2023-11-09 02:00:53 |
| Insecure versions: | Up To 1.23.3 |
| Known since: | 2023-06-23 02:00:18 |
| Insecure versions: | Up To 1.22.8 |
| Known since: | 2022-03-11 11:11:27 |
| Insecure versions: | Versions 2.16.7 - 2.22.2 |
| Known since: | 2022-02-18 11:17:35 |
| Description: | The plugins do not properly validate a user has the required privileges to access a backup's nonce identifier, which may allow any users with an account on the site (such as subscriber) to download the most recent site & database backup. |
| Insecure versions: | Versions 1.16.7 - 1.22.2 |
| Known since: | 2022-02-18 11:02:22 |
| Insecure versions: | Up To 1.16.66 |
| Known since: | 2021-12-29 15:23:48 |
| Insecure versions: | Up To 1.16.56 |
| Known since: | 2021-12-28 11:20:36 |
| Insecure versions: | Up To 1.16.56 |
| Known since: | 2021-12-28 11:19:41 |
| Insecure versions: | Up To 1.16.65 |
| Known since: | 2021-12-08 15:19:35 |
| Insecure versions: | Up To 1.9.50 |
| Known since: | 2015-09-14 18:01:32 |
| Insecure versions: | Versions 2.0 - 2.9.63 |
| Known since: | 2015-04-21 02:39:31 |
| Description: | Updraft Plus (paid) <= 2.9.63 - XSS Vulnerability |
| Insecure versions: | Versions 2.0 - 2.9.63 |
| Known since: | 2015-04-21 02:39:31 |
| Description: | Updraft Plus (paid) <= 2.9.63 - XSS Vulnerability |
UpdraftPlus Backup and Restoration: Safety Recommendations
We have rated UpdraftPlus Backup and Restoration as Good (current version safe) which means that we have found vulnerabilities in older versions.
We recommend that you only use the latest version of UpdraftPlus Backup and Restoration.
UpdraftPlus Backup and Restoration: Staying Up-to-date
Make sure your installation of UpdraftPlus Backup and Restoration is safe with the following free Jetpack services for WordPress sites:
- Updates & Management
Turn on auto-updates for UpdraftPlus Backup and Restoration or manage in bulk. - Prevent Infiltrations
Automatic protection against brute force attacks and secure sign on.
UpdraftPlus Backup and Restoration: Keeping Safe
If you're running a business, ecommerce, news, or other critical website, Jetpack also provides additional indispensable services:
- Automated Backups
Full backup of your entire site with unlimited storage space. - Restores & Migrations
Restore or migrate your site from a backup with one click. - Security Scanning
Regular, automated scans of your site for malware, threats, and hacks. - Expert Support
Fast, priority support for any WordPress security issue.
About this information
This WordPress security information is part of our security library and is brought to you by Jetpack as part of our committment to a safer WordPress experience.
If you have any questions, please do not hesitate to contact us.
Jetpack 