Migrate vulnerabilities
We track 4 vulnerabilities in Migrate products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 20, 2024.
Latest Migrate vulnerabilities
- 8.8 High severity
Clone: Deserialization of Untrusted Data
The Clone plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.4.6 via deserialization of untrusted input in the 'recursive_unserialized_replace' function. This makes it possible for unauthenticated attackers to in
- 8.8 High severity
Clone: Missing Authorization
Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5.
- 8.8 High severity
Clone: Missing Authorization
Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5.
- 9.8 Critical severity
Backup Migration: Inclusion of Functionality from Untrusted Control Sphere
The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP header. This makes it possible for unauthenticated attackers to include remote files on the server, resulting in code executi