What’s Vulnerable › Products
servmask All-in-One WP Migration Unlimited Extension vulnerabilities
2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your servmask All-in-One WP Migration Unlimited Extension version is affected
Latest servmask All-in-One WP Migration Unlimited Extension vulnerabilities
- CVE-2026-6128 — All-in-One WP Migration Unlimited Extension <= 2.84 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ai1wm_backups_path' Parameter (CVSS 6.4)
- CVE-2026-5753 — All-in-One WP Migration Unlimited Extension <= 2.83 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Backup Schedule Creation and Backup File Download (CVSS 6.5)