CVE:CVE-2007-5800
CNNVD:CNNVD-200711-024
WordPress的BackUpWordPress 插件0.4.2b版本及其早期版本中存在多个PHP远程文件包含漏洞。远程攻击者可以借助对(1) plugins/BackUp/Archive.php, (2) Predicate.php, (3) Writer.php, (4) Reader.php,及其他plugins/BackUp/Archive/目录下的未明脚本的bkpwp_plugin_path参数中的一个URL，执行任意PHP代码。
solution:Upgrade tom_willmot backupwordpress_plugin to a higher version than 0.4.2b,and avoid the version (,0.4.2b]