CVE-2021-24172

The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the DB, plugins, and current...

CVE-2021-24172: Cross-Site Request Forgery (CSRF)

The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the DB, plugins, and current...

PT-2021-15718

Name of the Vulnerable Software and Affected Versions: VM Backups WordPress plugin versions 1.0 and earlier Description: The issue allows attackers to make a logged-in user perform unwanted actions, such as generating backups of the database, plugins, and current data, due to the lack of CSRF...

CVE-2021-24173: Cross-Site Request Forgery (CSRF)

The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as update the plugin's options, leading to a Stored Cross-Site Scripting issue...

PT-2021-15719

Name of the Vulnerable Software and Affected Versions: VM Backups WordPress plugin versions prior to 1.1 Description: The issue allows attackers to make unwanted actions on behalf of a logged-in user due to the lack of CSRF checks. This can lead to updating the plugin's options and potentially...