CVE-2011-4342

HIGH 7.5CVE-2011-4342 · Published 08/10/2012 · updated 16/06/2026

Package	Affected versions	Patched versions
backwpup backwpup	`≤ 1.7.1`	No fix yet

Description

PHP remote file inclusion vulnerability in wp_xml_export.php in the BackWPup plugin before 1.7.2 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpabs parameter.

References

packetstormsecurity.org/files/view/99799/SOS-11-003.txt · Exploit
seclists.org/fulldisclosure/2011/Mar/328 · Exploit
secunia.com/advisories/43565 · Vendor Advisory
wordpress.org/support/topic/plugin-backwpup-remote-and-local-codeexecution-vulnerability-sos-11-003
exploit-db.com/exploits/17056 · Exploit
openwall.com/lists/oss-security/2011/11/22/10 · Exploit
openwall.com/lists/oss-security/2011/11/22/7 · Exploit
osvdb.org/71481 · Exploit
senseofsecurity.com.au/advisories/SOS-11-003.pdf · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free