UpdraftPlus 1.22.3 Patches Severe Vulnerability Through Forced Security Update from WordPress.org – WP Tavern

UpdraftPlus, a plugin that enables customers to backup to varied cloud suppliers, has patched a extreme safety vulnerability that may enable logged-in customers to obtain a web site’s newest backups. The patched model (1.22.3) was despatched out by way of a pressured auto-update, a measure reserved for extreme vulnerabilities that have an effect on numerous customers. UpdraftPlus is lively on greater than 3 million WordPress websites.

The vulnerability was discovered by Jetpack Scan Safety researcher Marc Montpas throughout an inside audit. UpdraftPlus defined the vulnerability to customers in an advisory after the replace went out:

This defect permits any logged-in person on a WordPress set up with UpdraftPlus lively to train the privilege of downloading an current backup, a privilege which ought to have been restricted to administrative customers solely. This was doable due to a lacking permissions test on code associated to checking present backup standing. This allowed the acquiring of an inside identifier which was in any other case unknown, and will then be used to cross a test upon permission to obtain.

The difficulty impacts each the paid and free variations of the plugin. A repair was pushed to paid clients inside an hour of receiving the report. Each model of the free plugin between 1.16.7 and 1.22.3 is susceptible. UpdraftPlus claims the vast majority of websites have been up to date. WordPress.org stats present that ~35% of Updraft customers haven’t up to date to the newest, which leaves greater than one million installations nonetheless susceptible.

Up to now there aren’t any confirmed studies of exploits. For extra particulars on the vulnerability, take a look at Montpas’ report on the Jetpack web site. UpdraftPlus customers are inspired to test their web sites to make sure the plugin is operating on the newest, patched model.