CVE-2023-32960: WordPress UpdraftPlus Plugin <= 1.23.3 is vulnerable to Cross Site Request Forgery (CSRF)
Published Jun 22, 2023
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in UpdraftPlus.Com, DavidAnderson UpdraftPlus WordPress Backup Plugin <= 1.23.3 versions leads to sitewide Cross-Site Scripting (XSS).
Affected Software
1 affected component
updraftplus UpdraftPlus WordPress<=1.23.3
Remediation
Information
Update to 1.23.4 or a higher version.
Event History
Jun 22, 2023
CVE Published
via MITRE·12:51 PM
Data Sourced
via MITRE·12:51 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2023-32960.
2
What is the title of this vulnerability?
The title of this vulnerability is Cross-Site Request Forgery (CSRF) vulnerability in UpdraftPlus.Com DavidAnderson UpdraftPlus WordPress Backup Plugin <= 1.23.3 versions leads to sitewide Cross-Site Scripting (XSS).
3
What is the affected software?
The affected software is UpdraftPlus WordPress Backup Plugin version 1.23.3.
4
What is the severity of this vulnerability?
The severity of this vulnerability is high (6.1).
5
How can I fix this vulnerability?
Upgrade to a version of UpdraftPlus WordPress Backup Plugin that is higher than 1.23.3 to fix this vulnerability.