UpdraftPlus: WP Backup & Migration Plugin vulnerabilities

Product

UpdraftPlus: WP Backup & Migration Plugin

by davidanderson · last CVE Jun 11, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 2Medium 2Low 0

Severity

Exploitation

Watch

Add UpdraftPlus: WP Backup & Migration Plugin to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-10957	8.8	1%	Jan 4	UpdraftPlus: WP Backup & Migration Plugin 1.23.8 - 1.24.11 - Unauthenticated PHP Object Injection Affected: 1.23.8 through 1.24.11
CVE-2026-10795	8.1	4%	Jun 11	UpdraftPlus: WP Backup & Migration Plugin <= 1.26.4 - Unauthenticated Authentication Bypass via UpdraftCentral udrpc Affected: through 1.26.4