Unknown Database Backup For Wordpress vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Database Backup For Wordpress, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2022-1577deliciousbrainsdatabase_backup+2
EPSS score
0.42%
The Database Backup for WordPress plugin before 2.5.2 does not have CSRF check in place when updating the schedule backup settings, which could allow an attacker to make a logged in admin change them via a CSRF attack. This could lead to cases where attackers can send backup notification emails to themselves, which contain more details. Or disable the automatic backup schedule7.2CVE-2022-0255deliciousbrainsdatabase_backup+2
EPSS score
1.31%
The Database Backup for WordPress plugin before 2.5.1 does not properly sanitise and escape the fragment parameter before using it in a SQL statement in the admin dashboard, leading to a SQL injection issue