title: Database Backups <= 1.2.2.6 - CSRF to Backup Download
description: The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the database, change the plugin's settings and delete backups.
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
product: Database Backups
vendor: Unknown
versions:
lessThanOrEqual: 1.2.2.6, status: affected, version: 1.2.2.6, versionType: custom
}