UpdraftPlus: WP Backup & Migration Plugin

WordPress plugin · updraftplus · WordPress.org ↗

Latest v1.26.7 Last release Aug 21, 2026 Tested up to WP 7.1.1 3,000,000+ active installs

Critical

High

Known total

Unfixed

Running UpdraftPlus: WP Backup & Migration Plugin on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 8.1	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.26.5 WPVulnerability	< 1.26.5	v1.26.5	CVE-2026-10795	Jun 10, 2026
HIGH CVSS 8.8	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.24.12 WPVulnerability	< 1.24.12	v1.24.12	CVE-2024-10957	Jan 3, 2025
HIGH CVSS 7.1	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.23.4 WPVulnerability	< 1.23.4	v1.23.4	CVE-2023-32960	May 18, 2023
HIGH CVSS 8.1	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] <= 1.13.12 WPVulnerability	<= 1.13.12	patched	CVE-2017-16870	Nov 17, 2017
HIGH CVSS 8.1	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] <= 1.13.12 WPVulnerability	<= 1.13.12	patched	CVE-2017-16871	Nov 17, 2017
MEDIUM CVSS 6.1	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.25.1 WPVulnerability	< 1.25.1	v1.25.1	CVE-2025-0215	Jan 15, 2025
MEDIUM CVSS 5.4	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.23.11 WPVulnerability	< 1.23.11	v1.23.11	CVE-2023-5982	Nov 7, 2023
MEDIUM CVSS 6.1	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.22.9 WPVulnerability	< 1.22.9	v1.22.9	CVE-2022-0864	Mar 10, 2022
MEDIUM CVSS 6.5	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.22.3 WPVulnerability	< 1.22.3	v1.22.3	CVE-2022-0633	Feb 17, 2022
MEDIUM CVSS 6.1	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.16.69 WPVulnerability	< 1.16.69	v1.16.69	CVE-2021-25089	Dec 28, 2021
MEDIUM CVSS 6.1	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.16.66 WPVulnerability · PoC available	< 1.16.66	v1.16.66	CVE-2021-25022	Dec 6, 2021
MEDIUM CVSS 4.8	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.6.59 WPVulnerability	< 1.6.59	v1.6.59	CVE-2021-24423	May 9, 2021
MEDIUM CVSS 6.1	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.9.64 WPVulnerability	< 1.9.64	v1.9.64	CVE-2015-9360	Aug 28, 2019
MEDIUM CVSS 6.1	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.13.5 WPVulnerability	< 1.13.5	v1.13.5	CVE-2017-18593	Aug 8, 2017
UNKNOWN	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.26.7 WPVulnerability	< 1.26.7	v1.26.7	CVE-2026-76549	Jun 10, 2026
UNKNOWN	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] >= 2.22.14 - <= 2.23.2 WPVulnerability	>= 2.22.14, <= 2.23.2	patched	—	Mar 16, 2023
UNKNOWN	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] >= 1.22.14 - <= 1.23.2 WPVulnerability	>= 1.22.14, <= 1.23.2	patched	—	Mar 16, 2023
UNKNOWN	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] >= 1.22.14 - <= 1.23.2 WPVulnerability	>= 1.22.14, <= 1.23.2	patched	—	Mar 16, 2023
UNKNOWN	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.23.1 WPVulnerability	< 1.23.1	v1.23.1	—	Mar 9, 2023
UNKNOWN	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.23.1 WPVulnerability	< 1.23.1	v1.23.1	—	Mar 9, 2023
UNKNOWN	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.23.1 WPVulnerability	< 1.23.1	v1.23.1	—	Mar 8, 2023
UNKNOWN	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.16.59 WPVulnerability	< 1.16.59	v1.16.59	—	Jul 12, 2021
UNKNOWN	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.16.59 WPVulnerability	< 1.16.59	v1.16.59	—	Jul 12, 2021
UNKNOWN	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.9.6.4 WPVulnerability	< 1.9.6.4	v1.9.6.4	—	Apr 20, 2015
UNKNOWN	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.9.6.4 WPVulnerability	< 1.9.6.4	v1.9.6.4	—	Apr 20, 2015
UNKNOWN	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.9.51 WPVulnerability	< 1.9.51	v1.9.51	—	Feb 3, 2015
UNKNOWN	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.9.51 WPVulnerability	< 1.9.51	v1.9.51	—	Feb 3, 2015
UNKNOWN	UpdraftPlus: WP Backup & Migration Plugin [updraftplus] < 1.16.59 WPVulnerability	< 1.16.59	v1.16.59	—	—

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.