Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fpgc-mx57-4ww5

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the database, change the plugin's settings and delete backups.

The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the database, change the plugin's settings and delete backups.

EPSS

Процентиль: 59%
0.00375
Низкий

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 8.1
nvd
почти 5 лет назад

The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the database, change the plugin's settings and delete backups.

EPSS

Процентиль: 59%
0.00375
Низкий

Дефекты

CWE-352