CVE-2016-10876

The CVE-2016-10876 entry concerns the WordPress wp-database-backup plugin, affected before version 4.3.1. The vulnerability is a CSRF flaw in the plugin, allowing unauthorized actions to be triggered by an attacker on behalf of an authenticated user. Root cause: insufficient verification of reque...

CVE-2016-10873: Improper Neutralization of Input During Web Page Generation

The wp-database-backup plugin before 4.3.3 for WordPress has XSS...

CVE-2016-10875: Improper Neutralization of Input During Web Page Generation

The wp-database-backup plugin before 4.3.1 for WordPress has XSS...

CVE-2016-10876: Cross-Site Request Forgery (CSRF)

The wp-database-backup plugin before 4.3.1 for WordPress has CSRF...

CVE-2019-14949: Improper Neutralization of Input During Web Page Generation

The wp-database-backup plugin before 5.1.2 for WordPress has XSS...

CVE-2016-10874: Cross-Site Request Forgery (CSRF)

The wp-database-backup plugin before 4.3.3 for WordPress has CSRF...

DEBIAN-CVE-2015-3440

Cross-site scripting XSS vulnerability in wp-includes/wp-db.php in WordPress before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type...