WordPress Plugin Vulnerabilities

blogVault 1.05 - admin.php blogVault Key Setting CSRF

Description

The Backup & Staging – BlogVault Backups WordPress plugin was affected by an admin.php blogVault Key Setting CSRF security vulnerability.

Affects Plugins

Plugin icon
blogvault-real-time-backup
Fixed in 1.06

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
baebcd1e-e82f-4e28-9d7b-cb6d98ee7a9a

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2018-08-29 (about 7 years ago)

Other

Published
Title
Published
2025-09-09
Title
Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net < 1.117.6 - Authenticated (Contributor+) SQL Injection via order_by Parameter
Published
2023-05-30
Title
Tutor LMS < 2.2.0 - Instructor+ SQL Injection
Published
2024-05-15
Title
Tutor LMS Pro < 2.7.1 - Missing Authorization to Privilege Escalation
Published
2021-11-15
Title
Mediamatic < 2.8.1 - Subscriber+ SQL Injection
Published
2014-08-01
Title
oQey Gallery <= 0.4.8 - SQL Injection