2023-12-22

2023-12-23

2023-12-24

All (2) Critical (2) High (4) Medium (4)

CVE-2023-6972 Dec 23, 02:15 CRITICAL PATCH Act Now

The Backup Migration plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.9 via the 'content-backups' and 'content-name', 'content-manifest', or. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP WordPress RCE Path Traversal Backup Migration +2

NVD VulDB

CVSS 3.1

9.8

EPSS

3.8%

CVE-2023-6971 Dec 23, 02:15 CRITICAL PATCH Act Now

The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP header. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP WordPress RCE Backup Migration Wordpress Plugin +1

NVD

CVSS 3.1

9.8

EPSS

6.4%