WordPress security by component

UpdraftPlus: WP Backup & Migration Plugin

Plugin description

UpdraftPlus: WP Backup & Migration Plugin is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 11, 2026; the highest CVE/CNA score is 8.1.

Plugin slug: updraftplus-wp-backup-migration-plugin

Latest vulnerability

CVE-2026-10795: UpdraftPlus: WP Backup & Migration Plugin: Code execution

UpdraftPlus: WP Backup & Migration Plugin is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is <= 1.26.4.

PublishedJun 11, 2026

Known safe version> 1.26.4

		Safe version
Jun 11, 2026	CVE-2026-10795 UpdraftPlus: WP Backup & Migration Plugin: Code execution UpdraftPlus: WP Backup & Migration Plugin is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is <= 1.26.4.	> 1.26.4	CVE8.1 NVDPending