Skip to content
Sign in
Not rated

CVE-2021-24173 The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user…

Description

The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as update the plugin's options, leading to a Stored Cross-Site Scripting issue.

Affected products and versions

Product Affected versions Fixed in
VM Backups 1.0 No fix stated

Other CVEs of VM Backups

The 2 CVEs of VM Backups →
CVE-2021-24172 The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user… Not rated
Track this CVE