Lucene search
WpvulndbWPVDB-ID:3E647712-DEF6-4E15-BA0B-02C57C44265CHistoryDec 22, 2023 - 12:00 a.m.
Backup Migration < 1.4.0 - Authenticated (Admin+) OS Command Injection via url
2023-12-2200:00:00
wpscan.com
16
wordpress
plugin
os command injection
authenticated
adminηΊ§ permissions
Description The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 1.3.9 via the βurlβ parameter. This vulnerability allows authenticated attackers, with administrator-level permissions and above, to execute arbitrary commands on the host operating system.
Related
cvelist
cvelist
CVE-2023-7002
2023-12-23 01:59:51
cve
cve
CVE-2023-7002
2023-12-23 02:15:45
nvd
nvd
CVE-2023-7002
2023-12-23 02:15:45
prion
prion
Command injection
2023-12-23 02:15:00
openvas
openvas
WordPress Backup Migration Plugin < 1.4.0 Multiple Vulnerabilities
2023-12-29 00:00:00
wordfence
wordfence
AI Score
7.9
Confidence
High
EPSS
0.002
Percentile
59.8%
Related for WPVDB-ID:3E647712-DEF6-4E15-BA0B-02C57C44265C