The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Database Backup for WordPress plugin before 2.5.2 does not have CSRF check in place when updating the schedule backup settings, which could allow an attacker to make a logged in admin change them via a CSRF attack. This could lead to cases where attackers can send backup notification emails to themselves, which contain more details. Or disable the automatic backup schedule
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Wp Db Backup Plugin | — | Update wp-db-backup plugin to version 2.5.2, or a newer patched version | May 15, 2025 | May 11, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub