This WordPress plugin flaw exposed 90,000 websites to hackers

A vulnerability discovered in the WordPress Backup Migration Plugin is currently putting more than 90,000 websites at risk of getting hacked. This security flaw enables unauthenticated remote code execution, which makes it easier for potential attackers to gain access to these websites. According to a report by GBHackers, the vulnerability was discovered by a group of researchers from Nex Team while participating in the Wordfence Bug Bounty program.

What makes this vulnerability critical

This vulnerability, named CVE-2023-6553, allows attackers for remote code execution. The security flaw has been assigned a critical severity score of 9.8.