Deliciousbrains Database Backup vulnerabilities

3 vulnerabilities

Known vulnerabilities in Deliciousbrains Database Backup, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2021-24322delicious brainsdatabase backup for wordpress+2
EPSS score
0.70%
The Database Backup for WordPress plugin before 2.4 did not escape the backup_recipient POST parameter in before output it back in the attribute of an HTML tag, leading to a Stored Cross-Site Scripting issue.8.8CVE-2022-1577deliciousbrainsdatabase_backup+2
EPSS score
0.42%
The Database Backup for WordPress plugin before 2.5.2 does not have CSRF check in place when updating the schedule backup settings, which could allow an attacker to make a logged in admin change them via a CSRF attack. This could lead to cases where attackers can send backup notification emails to themselves, which contain more details. Or disable the automatic backup schedule7.2CVE-2022-0255deliciousbrainsdatabase_backup+2
EPSS score
1.31%
The Database Backup for WordPress plugin before 2.5.1 does not properly sanitise and escape the fragment parameter before using it in a SQL statement in the admin dashboard, leading to a SQL injection issue