UpdraftPlus <= 1.9.50 - Privilege Escalation via Nonce Leakage

Affects Plugin

fixed in version 1.9.51

References

URL https://blog.sucuri.net/2015/02/advisory-dangerous-nonce-leak-in-updraftplus.html
URL http://updraftplus.com/updraftplus-1-9-51-important-security-update/

Classification

Type BYPASS

Miscellaneous

Submitter ethicalhack3r
Submitter Website https://dewhurstsecurity.com/
Submitter Twitter ethicalhack3r
Views 5134
Verified No
WPVDB ID 7781

Timeline

Publicly Published 2015-02-03 (almost 5 years ago)
Added 2015-02-03 (almost 5 years ago)
Last Updated 2019-10-21 (27 days ago)

Our Other Services

Online WordPress Vulnerability Scanner WPScan WordPress Security Plugin