Read the docs

Vm Backups Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Vm Backups Project records in CISA KEV

No Vm Backups Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Vm Backups 2 records LOW

Records

2 records

TI-2021-06465 CVE-2021-24173 · GHSA-pfj9-w34v-grhw

VM Backups <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)

Priority LOW 27

The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as update the plugin's options, leading to a Stored Cross-Site Scripting issue.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00377 Published 2021-04-05 No fix listed CWE-352
TI-2021-06464 CVE-2021-24172 · GHSA-326h-4j76-v65q

VM Backups <= 1.0 - CSRF to Database Backup Download

Priority LOW 20

The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the DB, plugins, and current .

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00411 Published 2021-04-05 No fix listed CWE-352
Open these records in search →