Advisories · Technology
servmask All-in-One WP Migration and Backup.
Every CVE that names servmask All-in-One WP Migration and Backup among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
All-in-One WP Migration and Backup <= 7.110 - Unauthenticated Insufficient Credential Protection via Authorization Basic Header
- servmask All-in-One WP Migration and Backup
- Hard-coded credentials
- CVSS 8.8 High
All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution
- servmask All-in-One WP Migration and Backup
- SQL injection
- CVSS 4.4 Medium
All-in-One WP Migration and Backup <= 7.97 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import
- servmask All-in-One WP Migration and Backup
- Cross-site scripting (XSS)
- CVSS 7.5 High
All in One WP Migration <= 7.89 - Unauthenticated PHP Object Injection
- servmask All-in-One WP Migration and Backup
- Insecure deserialization
- CVSS 7.2 High
All-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code Injection
- servmask All-in-One WP Migration and Backup
- Code injection
- CVSS 5.3 Medium
All-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error Logs
- servmask All-in-One WP Migration and Backup
- Information disclosure
- CVSS 6.6 Medium
All-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows Hosts
- servmask All-in-One WP Migration and Backup
- Path traversal