Description
The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a backup restore when its fallback archive library is used, allowing high-privileged users to write files outside the intended restore directory, potentially leading to remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | BackWPup | < 5.7.7 | 5.7.7 |
References
- https://wpscan.com/vulnerability/be8c0eab-1874-4490-b94e-394f62a522f3/ exploit vdb-entry technical-description