PT-2021-15718
CVE-2021-24172
·
تاريخ النشر
2021-04-05
·
تاريخ التحديث
2021-04-09
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions:
VM Backups WordPress plugin versions 1.0 and earlier
Description:
The issue allows attackers to make a logged-in user perform unwanted actions, such as generating backups of the database, plugins, and current data, due to the lack of CSRF checks.
Recommendations:
For VM Backups WordPress plugin versions 1.0 and earlier, consider disabling the plugin until a patch is available to prevent exploitation.
As a temporary workaround, restrict access to the plugin's functionality to minimize the risk of unwanted actions being performed by attackers.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾