Christian Angel

The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the `exec` function. This allows unauthenticated attackers to disable pin protection for the admin interface of the plugin via a forged request, provided they can trick a site administrator into performing an action such as clicking on a link.

The issue allows unauthenticated attackers to extract sensitive data from a temporary SQL file via repeated GET requests during the limited time window of the backup process, specifically through the multi-call backup option.

The issue concerns improper sanitization of HTML in directory names. This allows styling of the directory name in the header bar when using basic HTML.