Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Vm Backups Project Clear all filters
TI-2021-06465 CVE-2021-24173 · GHSA-pfj9-w34v-grhw

VM Backups <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)

Priority LOW 27

The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as update the plugin's options, leading to a Stored Cross-Site Scripting issue.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00377 Published 2021-04-05 No fix listed CWE-352
TI-2021-06464 CVE-2021-24172 · GHSA-326h-4j76-v65q

VM Backups <= 1.0 - CSRF to Database Backup Download

Priority LOW 20

The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the DB, plugins, and current .

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00411 Published 2021-04-05 No fix listed CWE-352