Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-326h-4j76-v65q

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the DB, plugins, and current .

The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the DB, plugins, and current .

EPSS

Процентиль: 29%
0.00103
Низкий

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 4.3
nvd
почти 5 лет назад

The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the DB, plugins, and current .

EPSS

Процентиль: 29%
0.00103
Низкий

Дефекты

CWE-352