CVE-2015-9360: updraftplus updraftplus – CVSS 6.1 · Watchpost

← All vulnerabilities

CVE-2015-9360

中危 6.1CVE-2015-9360 · Published 28/08/2019 · updated 17/06/2026

要点

CVE-2015-9360 是影响 updraftplus (updraftplus) 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：0.95%，高于 61.3% 的漏洞。
修复：升级到 1.9.64 或更高版本。

Package	Affected versions	Patched versions
updraftplus updraftplus	`< 1.9.64`	`1.9.64`

Description

The updraftplus plugin before 1.9.64 for WordPress has XSS via add_query_arg() and remove_query_arg().

References

blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html · Third Party Advisory
updraftplus.com/new-security-vulnerability-found-across-significant-numbers-of-wordpress-plugins-including-updraftplus · Vendor Advisory

updraftplus 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free