UpdraftPlus, a widely used general purpose backup and restore plugin for WordPress, has made available a security release for both their free and paid versions, versions 1.22.4 and 2.22.4 respectively. It is strongly recommended to update your UpdraftPlus plugin to the most recent version immediately to close this security vulnerability. An update to the previously released versions 1.22.3 and 2.22.3 were made to resolve a conflict with another commonly used third party plugin.

This security release comes on the heels of a security researcher from Automattic, whom noted in their audit that the previous versions of UpdraftPlus allowed any logged in user on a WordPress installation to download an existing backup, even if the user did not have administrative privileges which this ability should be reserved for. This was possible to execute as there was a missing permissions check of the users privileges before being able to download the backup.

For any WordPress installation that allows untrusted users to have a login, that such users have the potential to download an existing backup.

More information on this security release can be found on UpdraftPlus’ site, as well as the CVE record created for this CVE-2022-23303.

Wordpress Hosting

Experience the difference with the fastest WordPress hosting platform.

Elastic Hosting

A flexible managed hosting solution that will grow with you and your needs grow.

Cloud Servers

Your dedicated cloud servers that are managed by us or managed by you.

Made InCanada
Made by Canadians,
for Canadians

Never worry about compliance again. Our servers are hosted directly on Canadian soil, and support is given by a 100% Canadian team.

We Start,
Where Others Stop.

If you've been burned by terrible hosting services before, we get you. We want every client to feel important and fully taken care of, and we'll spend the time it takes to solve any problem that arises.

Trusted by Clients Across All Industries

Don't take our word for it - let our happy clients do the talking. See More

Full Host did an amazing job of migrating my site seamlessly onto their server. My only regret was not switching my site over to them sooner. Now it is performing great, images are uploading way faster than ever before.

" Vancouver Sofa and Patio - Jerry Schmidt

Two thumbs up for Fullhost! Agents reply to me fairly quickly or at least let me know they received the ticket and are looking into it. Kudos to the support team as they have always given me exactly what I need without delays.

" Universal Staffing Inc. - Anthony Calvano

FullHost is an absolute pleasure to work with, and their customer service is exceptional. Whenever I have questions or need adjustments, they are there to help, quickly, efficiently, with answers and insights.

" Mooseworld Inc. Norine Leibel

With coast to coast coverage,
We help you serve the world.

Whether your audience is located in Europe, Asia, Africa, or Australia, provide them with lightening speed!

FullHost's data centers are located in Toronto and Vancouver to ensure worldwide quality and speed.

Get in Touch
We Trust Only The Best Tech to Support You

FullHost operates with the most innovative technology to bring you unparalleled levels of hosting services.