HOW TOo FIX CVE-2022-0633- AN AUTHENTICATED BACKUP DOWNLOAD VULNERABILITY IN UPDRAFTPLUS WORDPRESS PLUGIN
THESECMASTER
On Feb 14, 2022, A security researcher, Marc-Alexandre from Jetpack, discovered a high severity vulnerability in the UpdraftPlus WordPress plugin. The flaw tracked as CVE-2022-0633 with a base score of 8.5 lets the attacker download the WordPress site backup files with sensitive data.