CVE-2023-6553

CVE-2023-6553 PHP 文件包含导致 RCE — Backup Migration 插件 插件： Backup Migration backup-backup ≤ 1.3.7 CVSS： 9.8（严重） CWE： CWE-98 — 对用于 Include/Require 语句的文件名控制不当 身份验证要求： 无 影响： 远程代码执行 1. 这是什么漏洞？ Backup Migration 是一个相当流行的 WordPress 插件（约 90,000+ 个活跃安装），可帮助用户创建备份副本。在备份过程中，插件有一个名为 backup-heart.php 的文件在后台运行——它通...

WordPress_Backup_Migration-RCE_Unauthenticated

CVE-2023-6553 — WordPress用Backup Migrationプラグイン - リバースシェル 元のインタラクティブウェブシェルに加えて、ワンコマンドリバースシェル モードを追加したChocapikkのCVE-2023-6553エクスプロイトの拡張版です。 脆弱性 CVE-2023-6553 — WordPressプラグインBackup Migration （バージョン1.3.7以下）における認証なしリモートコード実行。 このプラグインはbackup-heart.phpを公開しており、Content-Dir...

Exploit for Code Injection in Backupbliss Backup_Migration

CVE-2023-6553 PHP File Inclusion Leading to RCE — Backup M...

Exploit for Code Injection in Backupbliss Backup_Migration

🔥 CVE-2023-6553 — WordPress Backup Migration RCE Unauthen...

WordPress Backup Migration 1.3.7 - Remote Command Execution

Exploit Title: WordPress Backup Migration 1.3.7 - Remote Command Execution Date: 2025-10-26 Exploit Author: DANG Vendor Homepage: https://backupbliss.com/ Software Link: https://wordpress.org/plugins/backup-backup/ Version: Backup Migration ≤1.3.7 Tested on: LINUX CVE : CVE-2023-6553 This module...

WordPress Backup Migration 1.3.7 Remote Command Execution Exploit

This Metasploit module exploits an unauthenticated remote command execution vulnerability in WordPress Backup Migration plugin versions 1.3.7 and below. The vulnerability is exploitable through the Content-Dir header which is sent to the /wp-content/plugins/backup-backup/includes/backup-heart.php...

WordPress Backup Migration 1.3.7 Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WordPress Backup Migration Plugin PHP Filter Chain RCE', 'Description' = %q This module exploits an unauth RCE in the WordPress plugin: Backup...

PT-2023-32828 · WordPress +1 · Backup Migration +1

Name of the Vulnerable Software and Affected Versions: Backup Migration plugin for WordPress versions 1.0.8 through 1.3.9 Description: The issue allows unauthenticated attackers to include remote files on the server, resulting in code execution, via the content-dir HTTP header. Successful...