PatchTheCVEvm backups vulnerabilities and fixes
Recent CVEs affecting vm backups, with upgrade or downgrade steps. 2 tracked.
Also searched as: vmbackups.
vm backups has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-04-05. Highest priority: CVE-2021-24173 (score 29/100).
- CVE-2021-24173 MEDIUM 6.1 UPGRADE The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in
- CVE-2021-24172 MEDIUM 4.3 UPGRADE The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in
FAQ
How do I fix vm backups vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is vm backups being exploited right now?
None of the tracked vm backups CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which vm backups CVE should I patch first?
CVE-2021-24173 currently ranks highest (29/100): The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in .