What’s Vulnerable › Products

servmask All-in-One WP Migration and Backup vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your servmask All-in-One WP Migration and Backup version is affected

Latest servmask All-in-One WP Migration and Backup vulnerabilities

• CVE-2026-89064 — All-in-One WP Migration and Backup <= 7.110 - Unauthenticated Insufficient Credential Protection via Authorization Basic Header (CVSS 5.3)
• CVE-2026-19949 — All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution (CVSS 8.8)
• CVE-2025-8490 — All-in-One WP Migration and Backup <= 7.97 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import (CVSS 4.4)
• CVE-2024-10942 — All in One WP Migration <= 7.89 - Unauthenticated PHP Object Injection (CVSS 7.5)
• CVE-2024-8852 — All-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error Logs (CVSS 5.3)
• CVE-2023-40004 — Unauth. Access Token Manipulation vulnerability in multiple ServMask WordPress plugins (CVSS 7.3)
• CVE-2022-2546 — All-in-One WP Migration < 7.63 - Unauthenticated Reflected XSS (CVSS 4.7)
• CVE-2022-1476 — All-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows Hosts (CVSS 6.5)