plugin

Updraftcentral Vulnerabilities

1 known security issue reported for the Updraftcentral WordPress plugin. Most recent disclosed Dec 6, 2022.

1 high

Running Updraftcentral on your site? Check whether your installed version is affected.

UpdraftCentral Dashboard 0.8.23 - Server-Side Request Forgery

high

The UpdraftCentral Dashboard plugin 0.8.23 for WordPress is vulnerable to Server-Side Request Forgery via the font parameter in the load_font action. It allows an unauthenticated attacker to make a request to any internal and external server.

CVSS:: 8.3
Affected:: 0.8.23 – 0.8.23
Fixed in:: 0.8.24
Disclosed:: Dec 6, 2022

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database