CVE-2024-13869

Summary

CVE-2024-13869 is a vulnerability affecting the WPvivid Backup & Migration plugin for WordPress. The issue lies in the 'upload_files' function, which fails to validate file types. Consequently, authenticated attackers with Administrator-level access or higher can upload arbitrary files onto the affected site's server. If these files contain malicious code, remote code execution could be possible. This vulnerability only impacts WordPress instances running on NGINX web servers, as .htaccess restrictions prevent file access on Apache servers.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.