Skip to content
OpenAdvisories

Vendor

servmask

10 known vulnerabilities.

Products

All-in-One WP Migration and Backup 7 All-in-One WP Migration Unlimited Extension 2 All-in-One WP Migration Box Extension 1 All-in-One WP Migration OneDrive Extension 1 All-in-One WP Migration Dropbox Extension 1 All-in-One WP Migration Google Drive Extension 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2026-19949 Public exploit

    All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution

    The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection via archive restore functionality in all versions up to, and including, 7.109 due to insufficient escaping on the user supplied parameter and lack of sufficient prepara…

    servmask All-in-One WP Migration and Backup Web / CMS
  • High 7.5
    CVE-2024-10942

    All in One WP Migration <= 7.89 - Unauthenticated PHP Object Injection

    The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.89 via deserialization of untrusted input in the 'replace_serialized_values' function. This makes it possible for unauthe…

    servmask All-in-One WP Migration and Backup Web / CMS
  • High 7.2
    CVE-2024-9162 Public exploit

    All-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code Injection

    The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to arbitrary PHP Code Injection due to missing file type validation during the export in all versions up to, and including, 7.86. This makes it possible for authenticated attackers, wit…

    servmask All-in-One WP Migration and Backup Web / CMS
  • High 7.3
    CVE-2023-40004 EPSS 11%

    Unauth. Access Token Manipulation vulnerability in multiple ServMask WordPress plugins

    Missing Authorization vulnerability in ServMask All-in-One WP Migration Box Extension, ServMask All-in-One WP Migration OneDrive Extension, ServMask All-in-One WP Migration Dropbox Extension, ServMask All-in-One WP Migration Google Drive Extension.This issue …

    servmask All-in-One WP Migration OneDrive Extension All-in-One WP Migration Google Drive Extension All-in-One WP Migration Box Extension