CVE-2023-32960

MEDIUM 6.1CVE-2023-32960 · Published 22/06/2023 · updated 17/06/2026

Package	Affected versions	Patched versions
updraftplus updraftplus	`≤ 1.23.3`	No fix yet

Description

Cross-Site Request Forgery (CSRF) vulnerability in UpdraftPlus.Com, DavidAnderson UpdraftPlus WordPress Backup Plugin <= 1.23.3 versions leads to sitewide Cross-Site Scripting (XSS).

References

patchstack.com/database/vulnerability/updraftplus/wordpress-updraftplus-plugin-1-23-3-csrf-lead-to-wp-admin-site-wide-xss-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free