Backup Bank: WordPress Backup Plugin <= 4.0.28 - Missing Authorization via post_user_feedback_backup_bank
mediumThe Backup Bank: WordPress Backup Plugin plugin for WordPress is vulnerable to unauthorized execution of an AJAX action due to a missing capability check on the post_user_feedback_backup_bank() function in versions up to, and including, 4.0.28. This makes it possible for authenticated attackers with subscriber-level ac...
- CVSS:
- 5.3
- Affected:
- up to 4.0.28
- Fix:
- No patched version reported
- Disclosed:
- Mar 15, 2023