CVE-2021-24174 — Database Backups <= 1.2.2.6 - CSRF to Backup Download
The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the da…
Published: 2021-04-05 · CVSS: Unscored
The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the database, change the plugin's settings and delete backups.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7