CVE-2022-2271: Improper Neutralization of Input During Web Page Generation

The WP Database Backup WordPress plugin before 5.9 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2020-11530

A blind SQL injection vulnerability is present in Chop Slider 3, a WordPress plugin. The vulnerability is introduced in the id GET parameter supplied to getscript/index.php, and allows an attacker to execute arbitrary SQL queries in the context of the WP database user. Recent assessments: h00die ...

CVE-2020-7241

The CVE concerns the WordPress WP Database Backup plugin (affected through 5.5, with related OpenVAS entry for

CVE-2020-7241: Use of Insufficiently Random Values

The WP Database Backup plugin through 5.5 for WordPress stores downloads by default locally in the directory wp-content/uploads/db-backup/. This might allow attackers to read ZIP archives by guessing random ID numbers, guessing date strings with a 20200..10..20..30..9 format, guessing UNIX...

CVE-2020-7048: Missing Authentication for Critical Function

The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the database to the initial WordPress set-up state deleting all site content stored in that table, as demonstrated by a wp-admin/admin-post.php?db-reset-tables=comments...

CVE-2020-7047: Improper Privilege Management

The WordPress plugin, WP Database Reset through 3.1, contains a flaw that gave any authenticated user, with minimal permissions, the ability with a simple wp-admin/admin.php?db-reset-tables=users request to escalate their privileges to administrator while dropping all other users from the table...

WordPress wp-database-backup plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-database-backup plugin is a database backup and restore plugin used in it. A cross-site request forgery vulnerability...

WordPress wp-database-backup plugin cross-site scripting vulnerability (CNVD-2019-27696)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-database-backup plugin is a database backup and restore plugin used in it. A cross-site scripting vulnerability exists i...

WordPress wp-database-backup plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-database-backup plugin is a database backup and restore plugin used in it. A cross-site scripting vulnerability exists i...

WordPress wp-database-backup plugin cross-site request forgery vulnerability (CNVD-2019-27694)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-database-backup plugin is a database backup and restore plugin used in it. A cross-site request forgery vulnerability...

CVE-2019-14949

The wp-database-backup plugin before 5.1.2 for WordPress has XSS...

CVE-2016-10875

The wp-database-backup plugin before 4.3.1 for WordPress has XSS...

Cross site request forgery (csrf)

The wp-database-backup plugin before 4.3.1 for WordPress has CSRF...

Cross site scripting

The wp-database-backup plugin before 5.1.2 for WordPress has XSS...

CVE-2019-14949

The wp-database-backup plugin before 5.1.2 for WordPress has XSS...

CVE-2019-14949

The CVE-2019-14949 entry concerns the WordPress WP Database Backup plugin (before version 5.1.2) and is due to a Cross-Site Scripting (XSS) vulnerability in that plugin. Multiple connected sources confirm the affected software and the vulnerability class (XSS) with remediation guidance: upgrade t...

CVE-2016-10873

CVE-2016-10873 affects the WordPress wp-database-backup plugin prior to version 4.3.3, where an XSS vulnerability exists in the plugin’s handling of data. The Red Hat entry and CNVD/CVE records confirm a cross-site scripting flaw that can allow client-side code execution within affected pages. Th...

CVE-2016-10873

The wp-database-backup plugin before 4.3.3 for WordPress has XSS...

CVE-2016-10874

Summary (CVE-2016-10874) : The WP-Database-Backup WordPress plugin is affected by a CSRF vulnerability in versions prior to 4.3.3. Multiple sources (Red Hat, CNVD, CVE lists, WPVulnDB, and PT Security) confirm the issue and indicate the vulnerability resides in the plugin’s handling of requests t...

CVE-2016-10875

The wp-database-backup WordPress plugin is affected (versions prior to 4.3.1) by a cross-site scripting (XSS) flaw. Several connected sources confirm the issue and relate it to inadequate input validation (and some references note CSRF in related advisories). The root cause is exposure via the pl...