{"cvss":0.0,"datePublished":"2026-05-04T00:00:00Z","dateUpdated":"2026-05-04T00:00:00Z","description":"The UpdraftPlus WordPress plugin Free before 1.22.3 and Premium before 2.22.3 do not properly validate a user has the required privileges to access a backup's nonce identifier, which may allow any users with an account on the site (such as subscriber) to download the most recent site & database backup.","dueDate":"","id":"CVE-2022-0633","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"updraftplus","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"updraftplus updraftplus Incorrect Authorization","vendor":"updraftplus"}