Skip to main content
ExploitPublished

WordPress Backup Migration 1.3.7 · Remote Command Execution

Source Exploit-DB RSS Feed

0
Severity
Medium

Rated by Threat Radar

Data as of 10 Apr 2026, 00:24 UTC

What to do

AI-suggested

Until an official fix is available, consider disabling or removing the vulnerable plugin to prevent exploitation. Monitor official WordPress plugin repositories and vendor channels for updates.

Description

WordPress Backup Migration 1.3.7 - Remote Command Execution

Indicators of compromise

Exploit source code

Exploit code for WordPress Backup Migration 1.3.7 - Remote Command ExecutionPHP · 5,810 characters
# Exploit Title: WordPress Backup Migration 1.3.7 - Remote Command Execution
# Date: 2025-10-26
# Exploit Author: DANG
# Vendor Homepage: https://backupbliss.com/
# Software Link: https://wordpress.org/plugins/backup-backup/
# Version: Backup Migration ≤1.3.7
# Tested on: LINUX
# CVE : CVE-2023-6553

##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##

class MetasploitModule < Msf::Exploit::Remote
  Rank = Exce…

References

Community reviews

Loading reviews…