Skip to content
OpenAdvisories

Product · WP Engine

WP Migrate Lite – Migration Made Easy

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.8
    CVE-2025-11427

    WP Migrate Lite <= 2.7.6 - Unauthenticated Blind Server-Side Request Forgery

    The WP Migrate Lite – WordPress Migration Made Easy plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.7.6 via the wpmdb_flush AJAX action. This makes it possible for unauthenticated attackers to ma…

    WP Engine WP Migrate Lite – Migration Made Easy Web / CMS