Read the docs

Delicious Brains

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Delicious Brains records in CISA KEV

No Delicious Brains vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Database Backup 3 records LOW Better Search Replace 1 record LOW Wp Offload Ses Lite 1 record LOW

Records

3 records in Database Backup · all components

TI-2022-00190 CVE-2022-0255 · GHSA-39wp-jccv-4jrh

Database Backup for WordPress < 2.5.1 - Admin+ SQL Injection

Priority LOW 34

The Database Backup for WordPress plugin before 2.5.1 does not properly sanitise and escape the fragment parameter before using it in a SQL statement in the admin dashboard, leading to a SQL injection issue

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0131 Published 2022-02-21 Fixed in 2.5.1 CWE-89
TI-2022-01448 CVE-2022-1577 · GHSA-r88p-mmpm-r9x8

Database Backup for WordPress < 2.5.2 - Arbitrary Schedule Settings Update via CSRF

Priority LOW 25

The Database Backup for WordPress plugin before 2.5.2 does not have CSRF check in place when updating the schedule backup settings, which could allow an attacker to make a logged in admin change them via a CSRF attack.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00425 Published 2022-06-06 Fixed in 2.5.2 CWE-352
Open these records in search →