CVE-2021-24172

Name of the Vulnerable Software and Affected Versions: VM Backups WordPress plugin versions 1.0 and earlier

Description: The issue allows attackers to make a logged-in user perform unwanted actions, such as generating backups of the database, plugins, and current data, due to the lack of CSRF checks.

Recommendations: For VM Backups WordPress plugin versions 1.0 and earlier, consider disabling the plugin until a patch is available to prevent exploitation. As a temporary workaround, restrict access to the plugin's functionality to minimize the risk of unwanted actions being performed by attackers.