漏洞描述
BackupBuddy versions 8.5.8.0 - 8.7.4.1 are vulnerable to a local file inclusion vulnerability via the 'download' and 'local-destination-id' parameters.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
www.wordfence.comhttps://www.wordfence.com/blog/2022/09/psa-nearly-5-million-attacks-blocked-targeting-0-day-in-backupbuddy-plugin/↗ithemes.comhttps://ithemes.com/blog/wordpress-vulnerability-report-special-edition-september-6-2022-backupbuddy↗ithemes.comhttps://ithemes.com/backupbuddy/↗cve.mitre.orghttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31474↗ithemes.comhttps://ithemes.com/blog/wordpress-vulnerability-report-special-edition-september-6-2022-backupbuddy/↗