Input validation vulnerability in UpdraftPlus WordPress Backup Plugin 1.16.56

The UpdraftPlus plugin is a plugin for WordPress, a popular website building platform. In versions up to and including 1.16.56 of the plugin, there is a vulnerability called Local File Inclusion. This means that attackers who have administrator-level permissions on the website can use the vulnerability to include and execute any file on the server. This can allow them to bypass access controls, get sensitive information, or even execute certain types of code, even if the website only allows uploading of “safe” file types like images.