CVE-2024-7689: Cross-Site Request Forgery (CSRF)

The Snapshot Backup WordPress plugin through 2.1.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

PT-2024-38511

Name of the Vulnerable Software and Affected Versions Snapshot Backup WordPress plugin versions 2.1.1 and earlier Description The issue concerns a lack of CSRF checks in some areas of the plugin, as well as missing sanitization and escaping. This could allow attackers to make logged-in admins add...