PT-2023-7889 · WordPress · Backup Migration

Nex Team + 1 · Publicado 2023-12-05 · Atualizado 2026-03-06 · CVE-2023-6553

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Backup Migration plugin for WordPress versions up to, and including, 1.3.7

Description The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includes/backup-heart.php file. This is due to an attacker being able to control the values passed to an include statement, and subsequently leverage that to achieve remote code execution. This makes it possible for unauthenticated attackers to easily execute code on the server. The estimated number of potentially affected devices worldwide is around 50,000 to 90,000 websites.

Recommendations Update the Backup Migration plugin to version 1.3.8 or later to resolve the issue. As a temporary workaround, consider disabling the includes/backup-heart.php file until a patch is available. Restrict access to the vulnerable backup-heart.php file to minimize the risk of exploitation. Avoid using the Backup Migration plugin until the issue is resolved.

Exploit

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-20

CWE-94

Identificadores relacionados

BDU:2023-08960

CVE-2023-6553

Produtos afetados

Backup Migration

Referências · 62

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_backup_migration_php_filter.rb · Exploit
• 🔥 https://github.com/Chocapikk/CVE-2023-6553 · Exploit
• 🔥 https://exploit-db.com/exploits/52486 · Exploit
• 🔥❌ https://github.com/Chocapikk/CVE-2023-6553.git · Exploit, Deleted
• https://twitter.com/latestly/status/1734936471084364095 · Publicação no Twitter
• https://t.me/proxy_bar/1866 · Publicação no Telegram
• https://twitter.com/secure_blink/status/1735041861700432381 · Publicação no Twitter
• https://t.me/freedomf0x/20762 · Publicação no Telegram
• https://twitter.com/redsecuretech/status/2029929086592659664 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-6553 · Aviso do Fabricante
• https://twitter.com/CyberxtronTech/status/1734758331703791654 · Publicação no Twitter
• https://twitter.com/DailyDarkWeb/status/1864728320652234756 · Publicação no Twitter
• https://plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.7/includes/backup-heart.php#L64 · Correção
• https://twitter.com/ehackingservice/status/1734576161638822314 · Publicação no Twitter
• https://t.me/pentestingnews/41932 · Publicação no Telegram