Not rated
CVE-2022-0255 The Database Backup for WordPress plugin before 2.5.1 does not properly sanitise and escape the fragment parameter…
Description
The Database Backup for WordPress plugin before 2.5.1 does not properly sanitise and escape the fragment parameter before using it in a SQL statement in the admin dashboard, leading to a SQL injection issue
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Database Backup for WordPress 2.5 | earliest → < 2.5.1 | 2.5.1 |