Lucene search
PRIOn knowledge basePRION:CVE-2023-6972HistoryDec 23, 2023 - 2:15 a.m.
Path traversal
2023-12-2302:15:00
PRIOn knowledge base
www.prio-n.com
6
path traversal
backup migration plugin
wordpress
vulnerability
http headers
arbitrary files
site takeover
remote code execution
The Backup Migration plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.9 via the ‘content-backups’ and ‘content-name’, ‘content-manifest’, or ‘content-bmitmp’ and ‘content-identy’ HTTP headers. This makes it possible for unauthenticated attackers to delete arbitrary files, including the wp-config.php file, which can make site takeover and remote code execution possible.
| CPE | Name | Operator | Version |
|---|---|---|---|
| backup_migration | lt | 1.4.0 |
References
plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.9/includes/backup-heart.php
plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.9/includes/bypasser.php
plugins.trac.wordpress.org/changeset/3012745/backup-backup
www.wordfence.com/threat-intel/vulnerabilities/id/0a3ae696-f67d-4ed2-b307-d2f36b6f188c?source=cve
Related
nvd
nvd
CVE-2023-6972
2023-12-23 02:15:45
wpvulndb
wpvulndb
cve
cve
CVE-2023-6972
2023-12-23 02:15:45
cvelist
cvelist
CVE-2023-6972
2023-12-23 01:59:46
openvas
openvas
WordPress Backup Migration Plugin < 1.4.0 Multiple Vulnerabilities
2023-12-29 00:00:00
wordfence
wordfence