PatchTheCVEdatabase backup vulnerabilities and fixes
Recent CVEs affecting database backup, with upgrade or downgrade steps. 3 tracked.
Also searched as: databasebackup.
database backup has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-06-08. Highest priority: CVE-2022-0255 (score 48/100).
- CVE-2022-1577 MEDIUM 5.4 UPGRADE The Database Backup for WordPress plugin before 2.5.2 does not have CSRF check in place when updating the sche
- CVE-2022-0255 HIGH 7.2 UPGRADE The Database Backup for WordPress plugin before 2.5.1 does not properly sanitise and escape the fragment param
- CVE-2021-24322 MEDIUM 5.4 UPGRADE The Database Backup for WordPress plugin before 2.4 did not escape the backup_recipient POST parameter in befo
FAQ
How do I fix database backup vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is database backup being exploited right now?
None of the tracked database backup CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which database backup CVE should I patch first?
CVE-2022-0255 currently ranks highest (48/100): The Database Backup for WordPress plugin before 2.5.1 does not properly sanitise and escape the fragment param.