PHP Remote File Inclusion Vulnerability in BackWPup Plugin for WordPress
CVE-2011-4342

Currently unrated

Key Information:

Vendor: Wordpress
Status: BackWPup
Vendor: CVE Published:; 8 October 2012

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2011-4342?

The BackWPup plugin for WordPress is affected by a PHP remote file inclusion vulnerability found in the wp_xml_export.php file. This vulnerability enables remote attackers to execute arbitrary PHP code by injecting a malicious URL into the wpabs parameter. It is critical for users of the BackWPup plugin, especially those running versions prior to 1.7.2, to ensure they apply necessary updates to safeguard their sites from potential exploits.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2011-4342 - Proof of Concept