Lucene search
China National Vulnerability DatabaseCNVD-2022-88216HistorySep 28, 2022 - 12:00 a.m.
WordPress Backup Scheduler Cross-Site Request Forgery Vulnerability
2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
wordpress
backup scheduler
cross-site request forgery
vulnerability
php
web application
exploit
malicious requests
sensitive actions
security advisory
0.001 Low
EPSS
Percentile
39.6%
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Backup Scheduler 1.5.13 and earlier versions contain a cross-site request forgery vulnerability, which stems from a WEB application that does not adequately verify that requests are coming from trusted users. An attacker could exploit the vulnerability to spoof malicious requests to trick victims into clicking through to perform sensitive actions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress backup scheduler <= | eq | 1.5.13 |
Related
wpvulndb
wpvulndb
Backup Scheduler <= 1.5.13 - Cross-Site Request Forgery
2022-09-23 00:00:00
nvd
nvd
CVE-2022-38079
2022-09-23 19:15:14
patchstack
patchstack
cvelist
cvelist
prion
prion
Cross site request forgery (csrf)
2022-09-23 19:15:00
cve
cve
CVE-2022-38079
2022-09-23 19:15:14