Security Research

CVE-2023-6553 WordPress Backup Migration Unauthenticated RCE: PHP filter chain weaponized

Thinking 2024-02-29 6 min read Research Dossier
#Vulnerability Analysis#Code Audit#Web Security
Dark dossier of WordPress backup plugin and PHP filter chain

The WordPress Backup Migration plugin’s includes/backup-heart.php endpoint mishandles user input. An attacker uses a PHP filter chain to write a shell to disk and take over the server without authentication.

Unlock to view this content.