WordPress Plugin Vulnerabilities

Acunetix WP Security 4.0.3 - /wp-admin/admin.php wps-database Page Backup Generation CSRF Weakness

Description

The Acunetix WP Security WordPress plugin was affected by a /wp-admin/admin.php wps-database Page Backup Generation CSRF Weakness security vulnerability.

Affects Plugins

Plugin icon
wp-security-scan
Fixed in 4.0.5

References

URL
https://packetstormsecurity.com/files/#125218/

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
8f32dd44-b187-478b-a2fb-283fc6a287fc

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-05-07
Title
Supertext Translation and Proofreading <= 4.26 - Stored XSS via CSRF
Published
2023-10-06
Title
Urvanov Syntax Highlighter < 2.8.34 - Highlighting Blocks Mgt via CSRF
Published
2023-01-17
Title
Crayon Syntax Highlighter <= 2.8.4 - Cross-Site Request Forgery
Published
2023-01-27
Title
Uncanny Toolkit for LearnDash < 3.6.4.2 - Cross-Site Request Forgery (CSRF)
Published
2025-12-31
Title
WP-EasyArchives <= 3.1.2 - Cross-Site Request Forgery