High severity7.1NVD Advisory· Published Jun 22, 2023· Updated Jun 17, 2026

CVE-2023-32960

Description

Cross-Site Request Forgery (CSRF) vulnerability in UpdraftPlus.Com, DavidAnderson UpdraftPlus WordPress Backup Plugin <= 1.23.3 versions leads to sitewide Cross-Site Scripting (XSS).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Updraftplus/Updraftplus
cpe:2.3:a:updraftplus:updraftplus:*:*:*:*:*:wordpress:*:*
Range: <=1.23.3
WordPress/UpdraftPlus WordPress Backup Pluginllm-fuzzy
Range: <=1.23.3
UpdraftPlus.Com, DavidAnderson/UpdraftPlus WordPress Backup Pluginv5
Range: n/a

Patches

Vulnerability mechanics

References

patchstack.com/database/vulnerability/updraftplus/wordpress-updraftplus-plugin-1-23-3-csrf-lead-to-wp-admin-site-wide-xss-vulnerabilitynvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000