PHP Remote File Inclusion Vulnerability in BackWPup Plugin for WordPress
CVE-2011-4342
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 10%
What is CVE-2011-4342?
The BackWPup plugin for WordPress is affected by a PHP remote file inclusion vulnerability found in the wp_xml_export.php file. This vulnerability enables remote attackers to execute arbitrary PHP code by injecting a malicious URL into the wpabs parameter. It is critical for users of the BackWPup plugin, especially those running versions prior to 1.7.2, to ensure they apply necessary updates to safeguard their sites from potential exploits.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.