All products

all-in-one-wp-migration

WordPress · Plugin
18 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
All-in-One WP Migration and Backup <= 7.110 - Authenticated (Admin+) Privilege EscalationCVE-2026-81810 all-in-one-wp-migration WordPress Medium Fix reported
All-in-One WP Migration and Backup <= 7.110 - Unauthenticated Insufficient Credential Protection via Authorization Basic HeaderCVE-2026-89064 all-in-one-wp-migration WordPress Medium Fix reported
All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code ExecutionCVE-2026-19949 all-in-one-wp-migration WordPress High Fix reported
All-in-One WP Migration and Backup < 7.108 - Authenticated (Administrator+) Remote Code ExecutionCVE-2026-17533 all-in-one-wp-migration WordPress High Fix reported
All-in-One WP Migration and Backup <= 7.105 - Missing AuthorizationCVE-2026-12898 all-in-one-wp-migration WordPress Medium Fix reported
All-in-One WP Migration and Backup <= 7.97 - Authenticated (Administrator+) Stored Cross-Site Scripting via ImportCVE-2025-8490 all-in-one-wp-migration WordPress Medium Fix reported
All in One WP Migration <= 7.89 - Unauthenticated PHP Object InjectionCVE-2024-10942 all-in-one-wp-migration WordPress High Fix reported
All-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code InjectionCVE-2024-9162 all-in-one-wp-migration WordPress High Fix reported
All-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error LogsCVE-2024-8852 all-in-one-wp-migration WordPress Medium Fix reported
All-in-One WP Migration <= 7.14 - Unauthenticated Backup Download all-in-one-wp-migration WordPress Medium Fix reported
All-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows HostsCVE-2022-1476 all-in-one-wp-migration WordPress Medium Fix reported
All-in-One WP Migration <= 6.45 - Reflected Cross-Site Scripting all-in-one-wp-migration WordPress Medium Fix reported
All-in-One WP Migration <= 2.0.4 - Missing Authorization to Database Export all-in-one-wp-migration WordPress High Fix reported
All-in-One WP Migration <= 7.62 - Unauthenticated Reflected Cross-Site ScriptingCVE-2022-2546 all-in-one-wp-migration WordPress Medium Fix reported
All-in-One WP Migration <= 2.0.2 - Authorization Bypass to Arbitrary File Upload all-in-one-wp-migration WordPress High Fix reported
All-in-One WP Migration <= 7.62 - Authenticated (Admin+) Cross-Site Scripting all-in-one-wp-migration WordPress Medium Fix reported
All-in-One WP Migration <= 7.40 - Authenticated (Admin+) Arbitrary File UploadCVE-2021-24216 all-in-one-wp-migration WordPress High Fix reported
All-in-One WP Migration <= 6.97 - Authenticated Stored Cross-Site Scripting all-in-one-wp-migration WordPress Medium Fix reported