PatchTheCVEvm backups project vulnerabilities
Recent CVEs affecting vm backups project products. 2 tracked.
vm backups project has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-04-05. Highest priority: CVE-2021-24173 (score 29/100).
- CVE-2021-24173 MEDIUM 6.1 UPGRADE The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in
- CVE-2021-24172 MEDIUM 4.3 UPGRADE The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in
FAQ
How do I fix vm backups project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is vm backups project being exploited right now?
None of the tracked vm backups project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which vm backups project CVE should I patch first?
CVE-2021-24173 currently ranks highest (29/100): The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in .