Updater by BestWebSoft

Updater by BestWebSoft has one disclosed vulnerability in the WordSec catalog, all reported in 2017; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Updater by BestWebSoft has a vendor fix available, so running the current release closes it.

All of these findings were reported by Neven Birusk. Updater by BestWebSoft is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Updater by BestWebSoft vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2017-18565

Updater by BestWebSoft <= 1.34 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Updater by BestWebSoft banner
Latestv1.48

Updater by BestWebSoft

bestwebsoft

Author

bestwebsoft

4.7(52)
94/100
Last Updated
2025-12-03 (9mo ago)
Active Installs
2,000+
Downloads
198,551
Requires WP
5.6+
Requires PHP
0+
Tested up to
WP 6.9.7
Created
2013-01-22 (14y ago)

Updater by BestWebSoft is a reliable WordPress plugin that automatically updates your website’s core, plugins, themes, and translation files to the latest versions. Choose between automatic and manual update modes. Set custom update schedules, exclude specific plugins or themes from updating, and receive detailed email notifications about available updates and results — all without needing FTP access. With built-in backup options and compatibility with products from Envato, Updater helps you keep your WordPress site secure, up-to-date, and running smoothly. View Demo Free Features Select update mode: Manual Auto Search updates and update: WordPress Plugins Themes Translations Set the update search and update frequency Get email notification About new versions After updating Set the recipient email address Customize “FROM” field Compatible with latest WordPress version Incredibly simple settings for fast setup without modifying code Detailed step-by-step documentation and videos Multilingual and RTL ready Pro Features All features from Free version included plus: Exclude certain plugins, themes from automatic updates Exclude inactive plugins and themes from automatic updates Compatible with Envato (update products purchased on Envato) Create database and files backup before updating Backup all: Folders Tables Delete old backups automatically Disable WordPress core auto update Get answer to your question within one business day (Support Policy) Upgrade to Pro Now If you have a feature suggestion or idea you’d like to see in the plugin, we’d love to hear about it! Suggest a Feature Documentation & Videos [Doc] User Guide [Doc] Installation [Doc] Purchase [Video] Installation Instruction Help & Support Visit our Help Center if you have any questions, our friendly Support Team is happy to help – https://support.bestwebsoft.com/ Translation Russian (ru_RU) Ukrainian (uk) French (fr_FR) Italian (it_IT) Arabic (ar) German (de_DE) Spanish (es_SP) Some of these translations are not complete. We are constantly adding new features which should be translated. If you would like to create your own language pack or update the existing one, you can send the text of PO and MO files to BestWebSoft and we’ll add it to the plugin. You can download the latest version of the program for work with PO and MO files Poedit.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C