CVE-2023-6266

概要

参考情報

• plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.5/includes/initializer.php · Issue Tracking
• plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.5/includes/initializer.php · Issue Tracking
• plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.7/includes/initializer.php · Issue Tracking
• wordfence.com/threat-intel/vulnerabilities/id/08801f53-3c57-41a3-a637-4b52637cc612 · Third Party Advisory

backup migration のその他の脆弱性

• CVE-2023-6271高 7.5The Backup Migration WordPress plugin before 1.3.6 stores in-progress backups information in easy to find, publicly-accessible files, which …
• CVE-2023-7002高 7.2The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 1.3.9 via the 'url' p…
• CVE-2023-6972緊急 9.8The Backup Migration plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.9 via the 'content-backu…
• CVE-2023-6971緊急 9.8The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP heade…
• CVE-2023-6553緊急 9.8The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includ…