Description
The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldump function. This vulnerability allows unauthenticated attackers to execute arbitrary commands on the host operating system.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
databasebackup WP Database Backup – Unlimited Database & Files Backup by Backup for WP
Default version status: unaffected
0 to < 5.2affected
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/d21cf285-9d75-43a2-9e81-67116f0bf896?source=cve ↗
- https://www.wordfence.com/blog/2019/05/os-command-injection-vulnerability-patched-in-wp-database-backup-plugin/ ↗
- https://plugins.trac.wordpress.org/changeset/2078035/wp-database-backup ↗
- https://blog.sucuri.net/2019/06/os-command-injection-in-wp-database-backup.html ↗
- https://packetstormsecurity.com/files/153781/ ↗
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/wp_db_backup_rce.rb ↗