CVE-2023-6553 Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
Unauthenticated attackers can execute arbitrary code on the server via the Backup Migration WordPress plugin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-6553?
CVE-2023-6553 is a critical code injection vulnerability in inisev BackupBliss – Backup & Migration with Free Cloud Storage, published on 15 Dec 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includes/backup-heart.php file. This is due to an attacker being able to control the values passed to an include, and subsequently leverage that to achieve remote code execution. This makes it possible for unauthenticated attackers to easily execute code on the server.
Weakness: CWE-94
Which versions are affected by CVE-2023-6553?
It affects 1 product.
Products include Backupbliss Backup Migration.
How do I fix CVE-2023-6553?
No fix has been published for CVE-2023-6553 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2023-6553 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-6553 exists.
Public exploit code: 1 Metasploit module, 1 Exploit-DB entry, 1 Nuclei template and 7 proofs of concept on GitHub.
Other vulnerabilities in inisev BackupBliss – Backup & Migration with Free Cloud Storage
- CVE-2023-6972 Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletion
- CVE-2023-6971 Code injection in Backup Migration
- CVE-2023-6266 Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure
- CVE-2023-6271 Backup Migration Staging < 1.3.6 - Sensitive Data Exposure
- CVE-2023-7002 Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url
Sources
Also known as GHSA-2rcj-3wpj-27f2.