CVE-2023-6553

This repository contains a functional Python exploit for CVE-2023-6553, targeting the Backup Migration WordPress plugin. The exploit leverages a file inclusion vulnerability in `/includes/backup-heart.php` to achieve unauthenticated remote code execution (RCE) via PHP filter chains.

This repository contains a functional exploit for CVE-2023-6553, demonstrating an unauthenticated LFI to RCE vulnerability in the Backup Migration WordPress plugin. The exploit leverages PHP filter chains to achieve remote code execution.

This repository contains functional exploit code for CVE-2023-6553, an unauthenticated RCE vulnerability in the WordPress Backup Migration plugin (≤1.3.7). The exploit leverages a PHP filter chain via the Content-Dir header to achieve remote code execution.

This repository contains functional exploit code for CVE-2023-6553, an unauthenticated RCE vulnerability in the WordPress Backup Migration plugin (≤1.3.7). The exploit leverages a PHP filter chain via the Content-Dir header to achieve remote code execution.

This repository contains a functional exploit for CVE-2023-6553, a critical unauthenticated remote code execution vulnerability in the WordPress Backup plugin (versions <= 1.3.7). The exploit leverages PHP filter chains to bypass restrictions and achieve RCE via crafted HTTP requests.

This repository contains a functional Python exploit for CVE-2023-6553, targeting the Backup Migration WordPress plugin. The exploit leverages a PHP filter chain to achieve unauthenticated remote code execution via a vulnerable include statement in backup-heart.php.

This Metasploit module exploits an unauthenticated RCE vulnerability in the WordPress Backup Migration plugin (versions <= 1.3.7) via PHP filter chaining. It sends a malicious payload through the Content-Dir header to achieve remote code execution.