Skip to content
OpenAdvisories

Vendor

servmask

10 known vulnerabilities.

Products

All-in-One WP Migration and Backup 7 All-in-One WP Migration Unlimited Extension 2 All-in-One WP Migration Box Extension 1 All-in-One WP Migration OneDrive Extension 1 All-in-One WP Migration Dropbox Extension 1 All-in-One WP Migration Google Drive Extension 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-19949 Public exploit

    All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution

    The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection via archive restore functionality in all versions up to, and including, 7.109 due to insufficient escaping on the user supplied parameter and lack of sufficient prepara…

    servmask All-in-One WP Migration and Backup Web / CMS
  • High 7.2
    CVE-2024-9162 Public exploit

    All-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code Injection

    The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to arbitrary PHP Code Injection due to missing file type validation during the export in all versions up to, and including, 7.86. This makes it possible for authenticated attackers, wit…

    servmask All-in-One WP Migration and Backup Web / CMS