All-in-One WP Migration Unlimited Extension — Vulnerabilities & Security Advisories 2

All 2 CVE vulnerabilities found in All-in-One WP Migration Unlimited Extension, with AI-generated Chinese analysis, references, and POCs.

Vendor: servmask

CVE ID	Title	CVSS	Severity	Published
CVE-2026-6128	All-in-One WP Migration Unlimited Extension <= 2.84 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ai1wm_backups_path' Parameter CWE-79	6.4	Medium	2026-08-28
CVE-2026-5753	All-in-One WP Migration Unlimited Extension <= 2.83 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Backup Schedule Creation and Backup File Download CWE-862	6.5	Medium	2026-05-06

All 2 known CVE vulnerabilities affecting All-in-One WP Migration Unlimited Extension with full Chinese analysis, references, and POCs where available.