Cross site request forgery (csrf)

The wp-database-backup plugin before 4.3.3 for WordPress has CSRF...

Cross site request forgery (csrf)

The wp-database-backup plugin before 4.3.1 for WordPress has CSRF...

Cross site scripting

The wp-database-backup plugin before 5.1.2 for WordPress has XSS...

CVE-2019-14949

The wp-database-backup plugin before 5.1.2 for WordPress has XSS...

CVE-2019-14949

The CVE-2019-14949 entry concerns the WordPress WP Database Backup plugin (before version 5.1.2) and is due to a Cross-Site Scripting (XSS) vulnerability in that plugin. Multiple connected sources confirm the affected software and the vulnerability class (XSS) with remediation guidance: upgrade t...

CVE-2016-10873

CVE-2016-10873 affects the WordPress wp-database-backup plugin prior to version 4.3.3, where an XSS vulnerability exists in the plugin’s handling of data. The Red Hat entry and CNVD/CVE records confirm a cross-site scripting flaw that can allow client-side code execution within affected pages. Th...

CVE-2016-10873

The wp-database-backup plugin before 4.3.3 for WordPress has XSS...

CVE-2016-10874

Summary (CVE-2016-10874) : The WP-Database-Backup WordPress plugin is affected by a CSRF vulnerability in versions prior to 4.3.3. Multiple sources (Red Hat, CNVD, CVE lists, WPVulnDB, and PT Security) confirm the issue and indicate the vulnerability resides in the plugin’s handling of requests t...

CVE-2016-10874

The wp-database-backup plugin before 4.3.3 for WordPress has CSRF...

CVE-2016-10875

The wp-database-backup WordPress plugin is affected (versions prior to 4.3.1) by a cross-site scripting (XSS) flaw. Several connected sources confirm the issue and relate it to inadequate input validation (and some references note CSRF in related advisories). The root cause is exposure via the pl...

CVE-2016-10876

The wp-database-backup plugin before 4.3.1 for WordPress has CSRF...

CVE-2016-10876

The CVE-2016-10876 entry concerns the WordPress wp-database-backup plugin, affected before version 4.3.1. The vulnerability is a CSRF flaw in the plugin, allowing unauthorized actions to be triggered by an attacker on behalf of an authenticated user. Root cause: insufficient verification of reque...

PT-2019-7671 · WordPress · Wp-Database-Backup

Name of the Vulnerable Software and Affected Versions: wp-database-backup plugin versions prior to 4.3.1 Description: The issue affects the wp-database-backup plugin for WordPress, allowing for cross-site scripting XSS attacks. Recommendations: For versions prior to 4.3.1, update to version 4.3.1...

PT-2019-13886 · WordPress · Wp-Database-Backup

Name of the Vulnerable Software and Affected Versions: wp-database-backup plugin versions prior to 5.1.2 Description: The issue is related to a Cross-Site Scripting XSS problem. Recommendations: For versions prior to 5.1.2, update to version 5.1.2 or later to resolve the issue...

PT-2019-7669 · WordPress · Wp-Database-Backup

Name of the Vulnerable Software and Affected Versions: wp-database-backup plugin versions prior to 4.3.3 Description: The issue is related to a Cross-Site Scripting XSS problem. Recommendations: For versions prior to 4.3.3, update to version 4.3.3 or later to resolve the issue...

PT-2019-7670 · WordPress · Wp-Database-Backup

Name of the Vulnerable Software and Affected Versions: wp-database-backup plugin versions prior to 4.3.3 Description: The issue concerns a CSRF problem in the wp-database-backup plugin for WordPress. Recommendations: For versions prior to 4.3.3, update to version 4.3.3 or later to resolve the iss...

Cryptolocking WordPress Plugin Locks Up Blog Posts

A malicious WordPress plugin ironically called WP Security has been spotted in the wild encrypting blog posts and rendering the content unreadable. It’s capable of targeting individual posts — an unusual behavior, according to researchers. According to analysis from Sucuri, the plugin obtains a...

Cryptolocking WordPress Plugin Locks Up Blog Posts

A malicious WordPress plugin ironically called WP Security has been spotted in the wild encrypting blog posts and rendering the content unreadable. It’s capable of targeting individual posts — an unusual behavior, according to researchers. According to analysis from Sucuri, the plugin obtains a...

Dolibarr < 9.0.3 Multiple Vulnerabilities

Dolibarr is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dolibarr:dolibarr"; if description...

WordPress Plugin Database Backup < 5.2 - Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WP Database Backup RCE', 'Description' = %q There exists a command injection vulnerability in the Wordpress plugin wp-database-backup for version...