PT-2024-30432 · WordPress · Wpbackitup Backup/Restore

·

CVE-2024-43269

·

Published

2024-08-26

·

Updated

2024-09-12

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions WPBackItUp Backup and Restore WordPress versions 1.50 and earlier
Description A Cross-Site Request Forgery (CSRF) issue affects the WPBackItUp Backup and Restore WordPress plugin. This allows an attacker to perform unintended actions on a user's account. Users are urged to upgrade to the latest version to mitigate risks.
Recommendations For versions 1.50 and earlier, upgrade to the latest version to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the plugin until the update is applied.

Fix

CSRF

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-43269

Affected Products

Wpbackitup Backup/Restore