Description
The Database Backup for WordPress plugin before 2.5.1 does not properly sanitise and escape the fragment parameter before using it in a SQL statement in the admin dashboard, leading to a SQL injection issue
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Database Backup for WordPress | 2.5.1 – < 2.5.1 | 2.5.1 |