All-in-One WP Migration and Backup vulnerabilities
2 known vulnerabilities in All-in-One WP Migration and Backup from All-in-One WP Migration and Backup. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
All-in-One WP Migration and Backup: Improper Privilege Management
The All-in-One WP Migration and Backup WordPress plugin before 7.111 does not perform any capability check on several of its AJAX actions, gating them only on an installation-wide secret which it discloses to any user permitted to export the site, allowing suc
- 7.2 High severity
All-in-One WP Migration and Backup: Improper Privilege Management
The All-in-One WP Migration and Backup WordPress plugin before 7.108 does not restrict its migration import functionality to network administrators on multisite installations, allowing an administrator of a single subsite to execute arbitrary PHP code across t