CVE-2011-4342

Currently unrated

Key Information:

Vendor
Wordpress
Status
BackWPup
Vendor
CVE Published:
8 October 2012

Summary

PHP remote file inclusion vulnerability in wp_xml_export.php in the BackWPup plugin before 1.7.2 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpabs parameter.

References

http://wordpress.org/support/topic/plugin-backwpup-remote...
x_refsource_CONFIRM
http://www.osvdb.org/71481
vdb-entryx_refsource_OSVDB
http://www.exploit-db.com/exploits/17056
exploitx_refsource_EXPLOIT-DB

EPSS Score

9% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.