Not rated
CVE-2021-24174 The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged…
Description
The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the database, change the plugin's settings and delete backups.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Database Backups | 1.2.2.6 | No fix stated |