Skip to contentServmask All-in-one Wp Migration And Backup vulnerabilities
- servmask all-in-one wp migration and backupAll-in-One WP Migration and Backup < 7.111 - Authenticated Privilege Escalation to Admin via Import Secret Key DisclosureCVE-2026-818107.2 High
- servmask all-in-one wp migration and backupAll-in-One WP Migration and Backup <= 7.110 - Unauthenticated Insufficient Credential Protection via Authorization Basic HeaderCVE-2026-890645.3 Medium
- servmask all-in-one wp migration and backupAll-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code ExecutionCVE-2026-19949Public exploit8.8 High
- servmask all-in-one wp migration and backupAll-in-One WP Migration and Backup < 7.108 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via REST ImportCVE-2026-175337.2 High
- servmask all-in-one wp migration and backupAll-in-One WP Migration and Backup < 7.106 - Unauthenticated Arbitrary-Location Log File Write via Path TraversalCVE-2026-128986.5 Medium
- servmask all-in-one wp migration and backupAll-in-One WP Migration and Backup <= 7.97 - Authenticated (Administrator+) Stored Cross-Site Scripting via ImportCVE-2025-84904.4 Medium
- servmask all-in-one wp migration and backupAll in One WP Migration <= 7.89 - Unauthenticated PHP Object InjectionCVE-2024-109427.5 High
- servmask all-in-one wp migration and backup, yaniiliev all in one wp migration and backup +1 moreAll-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code InjectionCVE-2024-9162Public exploit7.2 High
- servmask all-in-one wp migration and backup, all-in-one wp migration +1 moreAll-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error LogsCVE-2024-88525.3 Medium
- servmask all-in-one wp migration, all-in-one wp migration and backup +1 moreAll-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows HostsCVE-2022-1476EPSS 46.3%6.6 Medium