migrate Backup Migration vulnerabilities

Latest migrate Backup Migration CVEs

Newest publication first

1. CVE-2023-6971 Backup Migration 1.0.8 - 1.3.9 - Remote File Inclusion via content-dir

   Published 2023-12-23

   Critical·CVSS 9.8 EPSS 6.4%

   The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP header. This makes it possible for unauthenticated attackers to include remote files on the server, resulting in code execution. NOTE: Successful...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.