Wpseeds Wp Database Backup — known CVE vulnerabilities

Every CVE whose affected-product data names Wpseeds Wp Database Backup, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2019-25224 — CVSS 9.8 (critical): The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldump function. This…
• CVE-2016-10874 — CVSS 8.8 (high): The wp-database-backup plugin before 4.3.3 for WordPress has CSRF.
• CVE-2016-10876 — CVSS 8.8 (high): The wp-database-backup plugin before 4.3.1 for WordPress has CSRF.
• CVE-2020-7241 — CVSS 7.5 (high): The WP Database Backup plugin through 5.5 for WordPress stores downloads by default locally in the directory wp-content/uploads/db-backup/…
• CVE-2016-10873 — CVSS 6.1 (medium): The wp-database-backup plugin before 4.3.3 for WordPress has XSS.
• CVE-2016-10875 — CVSS 6.1 (medium): The wp-database-backup plugin before 4.3.1 for WordPress has XSS.
• CVE-2019-14949 — CVSS 6.1 (medium): The wp-database-backup plugin before 5.1.2 for WordPress has XSS.
• CVE-2022-2271 — CVSS 4.8 (medium): The WP Database Backup WordPress plugin before 5.9 does not escape some of its settings, which could allow high privilege users such as…