UpHeron
All vulnerabilities

WordPress plugins

CVE-2024-10957

UpdraftPlus: WP Backup & Migration Plugin: Deserialization of Untrusted Data

Severity
High 8.8
Published
3 Jan 2025
Added to UpHeron
21 Oct 2026
Fixed in
1.24.12
Also known as
EUVD-2024-33351, WPV-4c9b147c1963
Sources
WPVulnerability

Affected software

SoftwareAffected versions
UpdraftPlusWordPress plugins · wp-plugin:updraftplus
  • Every version before 1.24.12

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-10957
  • Wordfence https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/updraftplus/updraftplus-wp-backup-migration-plugin-12411-unauthenticated-php-object-injection