CVE-2021-24174CWE-352
Database Backups <= 1.2.2.6 - CSRF to Backup Download
published April 5, 2021
What it is
The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the database, change the plugin's settings and delete backups.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.03218 · 88.1th percentile
- Weakness
- CWE-352 · Cross-Site Request Forgery (CSRF)
- Published
- 2021-04-05T18:27Z
EPSS history
Timeline