CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.2. It affects WordPress. Its EPSS score suggests a 45.6% probability of exploitation in the next 30 days. Exploitation may require the attacker to be authenticated.
CVE
CVE-2023-7002
Severity
HIGH
CVSS
7.2
EPSS
45.62%
WordPress
Original NVD Description
The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 1.3.9 via the 'url' parameter. This vulnerability allows authenticated attackers, with administrator-level permissions and above, to execute arbitrary commands on the host operating system.
Related CVEs
Other vulnerabilities affecting the same vendor(s)