All-in-One WP Migration and Backup vulnerabilities
We track 2 vulnerabilities in All-in-One WP Migration and Backup products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2026.
2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score
Latest All-in-One WP Migration and Backup vulnerabilities
- 7.2 High severity
All-in-One WP Migration and Backup: Improper Privilege Management
The All-in-One WP Migration and Backup WordPress plugin before 7.111 does not perform any capability check on several of its AJAX actions, gating them only on an installation-wide secret which it discloses to any user permitted to export the site, allowing suc
- 7.2 High severity
All-in-One WP Migration and Backup: Improper Privilege Management
The All-in-One WP Migration and Backup WordPress plugin before 7.108 does not restrict its migration import functionality to network administrators on multisite installations, allowing an administrator of a single subsite to execute arbitrary PHP code across t