All-in-One WP Migration and Backup — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in All-in-One WP Migration and Backup, with AI-generated Chinese analysis, references, and POCs.

Vendor: servmask

CVE ID	Title	CVSS	Severity	Published
CVE-2026-81810	All-in-One WP Migration and Backup < 7.111 - Authenticated Privilege Escalation to Admin via Import Secret Key Disclosure	-	-	2026-09-18
CVE-2026-89064	All-in-One WP Migration and Backup <= 7.110 - Unauthenticated Insufficient Credential Protection via Authorization Basic Header CWE-522	5.3	Medium	2026-09-17
CVE-2026-19949	All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution CWE-89	8.8	High	2026-08-25
CVE-2026-17533	All-in-One WP Migration and Backup < 7.108 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via REST Import	-	-	2026-08-16
CVE-2026-12898	All-in-One WP Migration and Backup < 7.106 - Unauthenticated Arbitrary-Location Log File Write via Path Traversal	-	-	2026-07-20
CVE-2025-8490	All-in-One WP Migration and Backup <= 7.97 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import CWE-79	4.4	Medium	2025-08-26
CVE-2024-10942	All in One WP Migration <= 7.89 - Unauthenticated PHP Object Injection CWE-502	7.5	High	2025-03-13
CVE-2024-9162	All-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code Injection CWE-94	7.2	High	2024-10-28
CVE-2024-8852	All-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error Logs CWE-200	5.3	Medium	2024-10-22
CVE-2022-1476	All-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows Hosts CWE-22	6.6	Medium	2022-05-10

All 10 known CVE vulnerabilities affecting All-in-One WP Migration and Backup with full Chinese analysis, references, and POCs where available.