Log in Start free

Vulnerability · Published Dec 15, 2023 · Assigned by Wordfence

CVE-2023-6553Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

Critical 9.8

In plain English

A critical-severity code injection in BackupBliss – Backup & Migration with Free Cloud Storage from inisev. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 97.8% (higher than 99.9% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, Nuclei, public proof-of-concept code.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)97.8%top 0.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling3Metasploit, Nuclei, Public PoC

Official description

The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includes/backup-heart.php file. This is due to an attacker being able to control the values passed to an include, and subsequently leverage that to achieve remote code execution. This makes it possible for unauthenticated attackers to easily execute code on the server.

Affected products (as reported)

VendorProductVersions
inisev BackupBliss – Backup & Migration with Free Cloud Storage 0 – through 1.3.7

Weakness: CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References