PT-2023-32829 · WordPress · Backup Migration

Hiroho Shimada

+1

·

Published

2023-12-22

·

Updated

2026-04-08

·

CVE-2023-6972

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Backup Migration plugin for WordPress versions up to, and including, 1.3.9
Description The issue allows unauthenticated attackers to perform Path Traversal via the content-backups and content-name, content-manifest, or content-bmitmp and content-identy HTTP headers. This enables the deletion of arbitrary files, including the wp-config.php file, potentially leading to site takeover and remote code execution.
Recommendations For versions up to, and including, 1.3.9, update to a version later than 1.3.9 to resolve the issue. As a temporary workaround, consider restricting access to the content-backups, content-name, content-manifest, content-bmitmp, and content-identy HTTP headers until a patch is available. Avoid using the affected HTTP headers in the Backup Migration plugin until the issue is resolved.

Fix

RCE

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-6972

Affected Products

Backup Migration