CVE-2023-6553 Scanner
CVE-2023-6553 scanner - Remote Code Execution (RCE) vulnerability in The Backup Migration plugin for WordPress
Used 3.1k times · 5.9k assets checked · url
CVE
CVE-2023-6553
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includes/backup-heart.php file. This is due to an attacker being able to control the values passed to an include, and subsequently leverage that to achieve remote code execution. This makes it possible for unauthenticated attackers to easily execute code on the server.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
backupbliss – backup & migration with free cloud storage
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: backupbliss – backup & migration with free cloud storage
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →