WordPress Backup Plugin with Over 3 Million Sites Discovered to Have a Critical Flaw

UpdraftPlus, a WordPress plugin with over three million downloads, has been patched to address a “serious” security flaw that can be used to extract the web’s private information using an account on the affected sites.

“From March 2019 onwards, all versions of UpdraftPlus have contained a vulnerability caused by a missing…