Skip to content
OpenAdvisories

Vendor

Migrate

7 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.8

    Clone <= 2.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialized_replace'

    The Clone plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.4.6 via deserialization of untrusted input in the 'recursive_unserialized_replace' function. This makes it possible for unauthenticated attackers to i…

  • High 8.1

    The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'co…