Date：2024/01/05

【Vulnerability Warning】WordPress recently released an update to address a remote code execution (RCE) vulnerability. Administrators are advised to promptly assess and apply the update for enhanced security.

Subject: WordPress recently released an update to address a remote code execution (RCE) vulnerability. Administrators are advised to promptly assess and apply the update for enhanced security.

Description:
For details, please refer to the following links.

TWCERT/CC：https://www.twcert.org.tw/tw/cp-104-7653-0096a-1.html

Wordfence： https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/backup-backup/backup-migration-137-unauthenticated-remote-code-execution

BLEEPING COMPUTER： https://www.bleepingcomputer.com/news/security/50k-wordpress-sites-exposed-to-rce-attacks-by-critical-bug-in-backup-plugin/

Network System Division
Computer and Communication Center