High · 7.1 CVE-2025-30608 EUVD-2025-7925GHSA-82p7-v78v-j5h9

WordPress SQL Backup plugin <= 3.5.2 - Cross Site Request Forgery (CSRF) Vulnerability

Published Mar 24, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Anthony Product: WordPress SQL Backup Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in Anthony WordPress SQL Backup wordpress-sql-backup allows Stored XSS.This issue affects WordPress SQL Backup: from n/a through <= 3.5.2.

Affected products

Vendor	Product	Affected	Fixed
Anthony	WordPress SQL Backup	≤ 3.5.2	—

References

https://patchstack.com/database/Wordpress/Plugin/wordpress-sql-backup/vulnerability/wordpress-wordpress-sql-backup-3-5-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry