← Vulnerability feed

Vulnerability record · CVE-2023-7002 · published 23 December 2023

CVE-2023-7002: Backupbliss backup migration os command injection vulnerability

Backupbliss · Backup Migration

The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 1.3.9 via the 'url' parameter. This vulnerability allows authenticated attackers, with administrator-level permissions and above, to execute arbitrary commands on the host operating system.

7.2 CVSS 3.1 High EPSS 31% · top 1.8% CWE-78 · OS command injection
7.2CVSS 3.1 base score
31%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References, 6 tagged exploit
17 Jun 2026Last modified by NVD

Description

The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 1.3.9 via the 'url' parameter. This vulnerability allows authenticated attackers, with administrator-level permissions and above, to execute arbitrary commands on the host operating system.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.9/includes/ajax.php#L1503 Exploit
https://plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.9/includes/ajax.php#L1518 Exploit
https://plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.9/includes/ajax.php#L88 Exploit
https://plugins.trac.wordpress.org/changeset/3012745/backup-backup Patch
https://www.linuxquestions.org/questions/linux-security-4/php-function-exec-enabled-how-big-issue-4175508082/ PatchThird Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/cc49db10-988d-42bd-a9cf-9a86f4c79568?source=cve Third Party Advisory
https://plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.9/includes/ajax.php#L1503 Exploit
https://plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.9/includes/ajax.php#L1518 Exploit
https://plugins.trac.wordpress.org/browser/backup-backup/tags/1.3.9/includes/ajax.php#L88 Exploit
https://plugins.trac.wordpress.org/changeset/3012745/backup-backup Patch
https://www.linuxquestions.org/questions/linux-security-4/php-function-exec-enabled-how-big-issue-4175508082/ PatchThird Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/cc49db10-988d-42bd-a9cf-9a86f4c79568?source=cve Third Party Advisory

Track CVE-2023-7002 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2023-6971Backupbliss backup migration inclusion from untrusted sphere vulnerabilityThe Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP header. This m…EPSS 6.4%9.8CVE-2023-6972Backupbliss backup migration path traversal vulnerabilityThe Backup Migration plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.9 via the 'content-backups' and '…EPSS 1.4%9.8CVE-2023-6553Backup Migration WordPress plugin unauthenticated remote code executionThe Backup Migration plugin for WordPress, in versions up to and including 1.3.7, passes attacker-controlled values into an include in /includes/back…EPSS 98%analysed7.5CVE-2023-6266Backupbliss backup migration information exposure vulnerabilityThe Backup Migration plugin for WordPress is vulnerable to unauthorized access of data due to insufficient path and file validation on the BMI_BACKUP…EPSS 2.1%7.5CVE-2023-6271Backupbliss backup migration vulnerabilityThe Backup Migration WordPress plugin before 1.3.6 stores in-progress backups information in easy to find, publicly-accessible files, which may allow…EPSS 0.69%6.5CVE-2023-0958Backupbliss backup migration missing authorization vulnerabilitySeveral plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_instal…EPSS 0.69%5.4CVE-2021-36884Backupbliss backup migration cross-site scripting vulnerabilityAuthenticated Persistent Cross-Site Scripting (XSS) vulnerability discovered in WordPress Backup Migration plugin <= 1.1.5 versions.EPSS 0.57%4.3CVE-2023-3977Backupbliss backup migration cross-site request forgery vulnerabilitySeveral plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce c…EPSS 0.61%

Source: NIST National Vulnerability Database (record CVE-2023-7002), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.