A critical vulnerability in a backup plugin has left 50,000 WordPress sites susceptible to remote code execution (RCE) attacks.

A WordPress plugin, installed on over 90,000 websites, contains a critical vulnerability exposing these sites to remote code execution attacks, potentially leading to full compromise. The plugin in question, Backup Migration, assists administrators in automating site backups to either local storage or a Google Drive account. The security flaw, identified as CVE-2023-6553 with a severity […]

Continue Reading