43 matches found
PT-2020-19491
Name of the Vulnerable Software and Affected Versions WP Database Backup plugin through 5.5 for WordPress Description The issue allows attackers to potentially read ZIP archives by guessing random ID numbers, date strings in a specific format, or UNIX timestamps, and then making HTTPS requests wi...
CVE-2020-7241: Use of Insufficiently Random Values
The WP Database Backup plugin through 5.5 for WordPress stores downloads by default locally in the directory wp-content/uploads/db-backup/. This might allow attackers to read ZIP archives by guessing random ID numbers, guessing date strings with a 20200..10..20..30..9 format, guessing UNIX...
WordPress wp-database-backup plugin cross-site scripting vulnerability (CNVD-2019-27696)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-database-backup plugin is a database backup and restore plugin used in it. A cross-site scripting vulnerability exists i...
WordPress wp-database-backup plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-database-backup plugin is a database backup and restore plugin used in it. A cross-site request forgery vulnerability...
WordPress wp-database-backup plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-database-backup plugin is a database backup and restore plugin used in it. A cross-site scripting vulnerability exists i...
WordPress wp-database-backup plugin cross-site request forgery vulnerability (CNVD-2019-27694)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-database-backup plugin is a database backup and restore plugin used in it. A cross-site request forgery vulnerability...
CVE-2019-14949
The wp-database-backup plugin before 5.1.2 for WordPress has XSS...
CVE-2016-10875
The wp-database-backup plugin before 4.3.1 for WordPress has XSS...
Cross site scripting
The wp-database-backup plugin before 5.1.2 for WordPress has XSS...
Cross site request forgery (csrf)
The wp-database-backup plugin before 4.3.1 for WordPress has CSRF...
CVE-2019-14949
The wp-database-backup plugin before 5.1.2 for WordPress has XSS...
CVE-2019-14949
The CVE-2019-14949 entry concerns the WordPress WP Database Backup plugin (before version 5.1.2) and is due to a Cross-Site Scripting (XSS) vulnerability in that plugin. Multiple connected sources confirm the affected software and the vulnerability class (XSS) with remediation guidance: upgrade t...
CVE-2016-10873
CVE-2016-10873 affects the WordPress wp-database-backup plugin prior to version 4.3.3, where an XSS vulnerability exists in the plugin’s handling of data. The Red Hat entry and CNVD/CVE records confirm a cross-site scripting flaw that can allow client-side code execution within affected pages. Th...
CVE-2016-10873
The wp-database-backup plugin before 4.3.3 for WordPress has XSS...
CVE-2016-10874
Summary (CVE-2016-10874) : The WP-Database-Backup WordPress plugin is affected by a CSRF vulnerability in versions prior to 4.3.3. Multiple sources (Red Hat, CNVD, CVE lists, WPVulnDB, and PT Security) confirm the issue and indicate the vulnerability resides in the plugin’s handling of requests t...
CVE-2016-10875
The wp-database-backup WordPress plugin is affected (versions prior to 4.3.1) by a cross-site scripting (XSS) flaw. Several connected sources confirm the issue and relate it to inadequate input validation (and some references note CSRF in related advisories). The root cause is exposure via the pl...
CVE-2016-10876
The CVE-2016-10876 entry concerns the WordPress wp-database-backup plugin, affected before version 4.3.1. The vulnerability is a CSRF flaw in the plugin, allowing unauthorized actions to be triggered by an attacker on behalf of an authenticated user. Root cause: insufficient verification of reque...
CVE-2019-14949: Improper Neutralization of Input During Web Page Generation
The wp-database-backup plugin before 5.1.2 for WordPress has XSS...