CVE-2020-7241

概要

参考情報

• V1n1v131r4/Exploiting-WP-Database-Backup-WordPress-Plugin · Exploit
• wordpress.org/plugins/wp-database-backup · Third Party Advisory
• zeroauth.ltd/blog/2020/01/21/analysis-on-cve-2020-7241-misrepresenting-a-security-vulnerability · Third Party Advisory

wp database backup のその他の脆弱性

• CVE-2019-25224緊急 9.8The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldump function. This vu…
• CVE-2022-2271中 4.8The WP Database Backup WordPress plugin before 5.9 does not escape some of its settings, which could allow high privilege users such as admi…
• CVE-2019-14949中 6.1The wp-database-backup plugin before 5.1.2 for WordPress has XSS.
• CVE-2016-10876高 8.8The wp-database-backup plugin before 4.3.1 for WordPress has CSRF.
• CVE-2016-10875中 6.1The wp-database-backup plugin before 4.3.1 for WordPress has XSS.