CVEs (2)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Vm Backups Project 1Vm Backups Jun 17, 2026 Apr 5, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as update the plugin's options, leading to a Stored Cross-Site Scripting issue. |
1Vm Backups Project 1Vm Backups Jun 17, 2026 Apr 5, 2021 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the DB, plugins, and current . |