Friday, 24 March, 2023

1.7M Wordpress sites receives overnight patch to fix flawed plugin

<p>Wordpress plugin, UpdraftPlus has become very common for backing up and restoring databases. A bug in the plugin allowed any subscriber, even untrusted ones, to access and download the site&rsquo;s database. Marc Montpas, a security researcher, found the vulnerability when he was auditing the plugin and immediately contacted the developers. The plugin is used by over 3M users and the bug has affected 1.7M of them.</p>