WordPress Plugin Vulnerabilities

Database Backup for WordPress

2022-05-11

Database Backup for WordPress < 2.5.2 - Arbitrary Schedule Settings Update via CSRF

Fixed in version 2.5.2

2022-01-24

Database Backup for WordPress < 2.5.1 - Admin+ SQL Injection

Fixed in version 2.5.1

2021-05-16

Database Backup for WordPress < 2.4 - Authenticated Persistent Cross-Site Scripting (XSS)

Fixed in version 2.4

2014-11-04

WP DB Backup <= 2.2.4 - Backup Filename Brute Forcing

Fixed in version 2.3.0