CVE-2023-7002
HIGHCVSS v3
7.2
HIGH
EPSS Score
45.9%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 1.3.9 via the 'url' parameter. This vulnerability allows authenticated attackers, with administrator-level permissions and above, to execute arbitrary commands on the host operating system.
Technical Details
- Published
- 12/23/2023
Frequently Asked Questions
What is CVE-2023-7002?
The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 1.3.9 via the 'url' parameter. This vulnerability allows authenticated attackers, with administrator-level permissions and above, to execute arbitrary commands on the host operating system.
Is CVE-2023-7002 actively exploited?
Active exploitation of CVE-2023-7002 has not been confirmed. The EPSS score is 45.9%, indicating the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2023-7002?
CVE-2023-7002 has a CVSS v3 base score of 7.2 (HIGH severity).
Is CVE-2023-7002 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.