RSS   Vulnerabilities for 'Vm backups'   RSS

2021-04-05
 
CVE-2021-24173

CWE-352
 

 
The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as update the plugin's options, leading to a Stored Cross-Site Scripting issue.

 
 
CVE-2021-24172

CWE-352
 

 
The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the DB, plugins, and current .

 


Copyright 2024, cxsecurity.com

 

Back to Top