Vulnerabilities > CVE-2021-24174 - Unspecified vulnerability in Database-Backups Project Database-Backups 1.2.2.6

047910
CVSS 8.1 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
database-backups-project
NVD
Published: 2021-04-05
Updated: 2024-11-21

Summary

The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the database, change the plugin's settings and delete backups.

Vulnerable Configurations

Part Description Count
Application
Database-Backups_Project
2

References