VULNERABILITY INTELLIGENCE

CVE-2021-24174

CVSS score8.1 HIGH

EPSS probability3.22%

CISA KEVNot currently listed

Published2021-04-05

Last modified2026-06-17

Description

The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the database, change the plugin's settings and delete backups.