WordPress Plugin Vulnerabilities

Backup Scheduler <= 1.5.13 - Cross-Site Request Forgery

Description

The plugin does not have CSRF check in some places, which could allow attackers to make logged in users perform unwanted actions

Affects Plugins

Plugin icon
backup-scheduler
No known fix

References

CVE
CVE-2022-38079

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
4.3 (medium)

Miscellaneous

Original Researcher
Lana Codes
Verified
No
WPVDB ID
cbbd3ece-9e15-4165-aabf-e2c31942b525

Timeline

Publicly Published
2022-09-23 (about 3 years ago)
Added
2022-09-25 (about 3 years ago)
Last Updated
2022-09-25 (about 3 years ago)

Other

Published
Title
Published
2024-02-23
Title
KODO Qiniu < 1.5.1 - Cross-Site Request Forgery
Published
2024-03-29
Title
Nictitate <= 1.1.4 - Cross-Site Request Forgery
Published
2025-04-04
Title
Sidebar Manager Light <= 1.1.8 - Cross-Site Request Forgery
Published
2014-08-01
Title
WP Easy Gallery < 2.7.3 - Cross-Site Request Forgery (CSRF)
Published
2021-07-28
Title
SEO Backlinks <= 4.0.1 - CSRF to Stored XSS