CVE-2024-12208

CVE-2024-12208 is a reserved candidate; however, connected documents provide concrete details for a related vulnerability: WordPress – Backup and Restore WordPress (WPBackItUp) plugin (versions up to 1.50) suffers a Cross-Site Request Forgery (CSRF) due to missing nonce validation in the ajaxQueu...

CVE-2021-24426: Improper Neutralization of Input During Web Page Generation

The Backup by 10Web – Backup and Restore Plugin WordPress plugin through 1.0.20 does not sanitise or escape the tab parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting issue...

PT-2021-15956

Name of the Vulnerable Software and Affected Versions The Backup by 10Web – Backup and Restore Plugin WordPress plugin versions 1.0.20 and earlier Description The issue is related to a reflected Cross-Site Scripting problem. It occurs because the tab parameter is not properly sanitised or escaped...