Skip to content
Noroxi

All-in-One WP Migration and Backup

all-in-one-wp-migration · plugin

Known security vulnerabilities for All-in-One WP Migration and Backup. Find out in seconds which version runs on your site with WP Lens.

7 known vulnerabilities

3 with public exploit code · latest Sep 16, 2026

Vulnerabilities

  • CVE-2026-19949

    All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution

    High 8.8

  • CVE-2024-10942

    All in One WP Migration <= 7.89 - Unauthenticated PHP Object Injection

    High 7.5

  • CVE-2024-9162

    All-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code Injection

    High 7.2

  • CVE-2022-1476

    All-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows Hosts

    Medium 6.5

  • CVE-2026-89064

    All-in-One WP Migration and Backup <= 7.110 - Unauthenticated Insufficient Credential Protection via Authorization Basic Header

    Medium 5.3

  • CVE-2024-8852

    All-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error Logs

    Medium 5.3

  • CVE-2025-8490

    All-in-One WP Migration and Backup <= 7.97 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import

    Medium 4.4

← Back to directory