CVE-2022-0255

Publication date

2022-02-21 10:46:11

Family

WPScan

State

PUBLISHED

Description

The Database Backup for WordPress plugin before 2.5.1 does not properly sanitise and escape the fragment parameter before using it in a SQL statement in the admin dashboard, leading to a SQL injection issue