Plugin icon

All-in-One WP Migration and Backup

all-in-one-wp-migration

Vulnerabilities:

11

Last Updated:

November 6, 2025

Active Installs:

5000000

Published
Title
Fixed in
CVSS
Published
2025-08-26
Title
All-in-One WP Migration and Backup < 7.98 - Admin+ Stored XSS
Fixed in
Fixed in 7.98
CVSS
3.5 (low)
Published
2025-03-12
Title
All in One WP Migration < 7.90 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 7.90
CVSS
7.5 (high)
Published
2024-10-27
Title
All-in-One WP Migration and Backup < 7.87 - Authenticated (Administrator+) Arbitrary PHP Code Injection
Fixed in
Fixed in 7.87
CVSS
7.2 (high)
Published
2024-10-21
Title
All-in-One WP Migration and Backup < 7.87 - Unauthenticated Information Disclosure via Error Logs
Fixed in
Fixed in 7.87
CVSS
5.3 (medium)
Published
2022-08-23
Title
All-in-One WP Migration < 7.63 - Unauthenticated Reflected XSS
Fixed in
Fixed in 7.63
CVSS
4.7 (medium)
Published
2022-04-28
Title
All-in-One WP Migration < 7.59 - Admin+ File Deletion on Windows Hosts via Path Traversal
Fixed in
Fixed in 7.59
CVSS
4.4 (medium)
Published
2022-02-07
Title
All-in-One WP Migration < 7.41 - Admin+ Arbitrary File Upload to RCE
Fixed in
Fixed in 7.41
CVSS
6.6 (medium)
Published
2020-03-25
Title
All-in-One WP Migration < 7.15 - Arbitrary Backup Download
Fixed in
Fixed in 7.15
CVSS
7.5 (high)
Published
2019-07-17
Title
All-in-One WP Migration < 7.0 - Authenticated Cross-Site Scripting (XSS)
Fixed in
Fixed in 7.0
CVSS
9.0 (critical)
Published
2017-06-20
Title
All-in-One WP Migration < 6.46 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 6.46
CVSS
6.1 (medium)
Published
2015-03-19
Title
All-in-One WP Migration < 2.0.5 - Unauthenticated Database Export
Fixed in
Fixed in 2.0.5
CVSS
8.6 (high)