Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 21
Reset filtersAll-in-One WP Migration and Backup <= 7.110 - Authenticated (Admin+) Privilege Escalation
All-in-One WP Migration Unlimited Extension <= 2.84 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ai1wm_backups_path' Parameter
All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution
All-in-One WP Migration and Backup < 7.108 - Authenticated (Administrator+) Remote Code Execution
All-in-One WP Migration and Backup <= 7.105 - Missing Authorization
All-in-One WP Migration Unlimited Extension <= 2.83 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Backup Schedule Creation and Backup File Download
All-in-One WP Migration and Backup <= 7.97 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import
All in One WP Migration <= 7.89 - Unauthenticated PHP Object Injection
All-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code Injection
All-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error Logs
Multiple ServMask Plugins <= (Various Versions) - Missing Authorization to Access Token Update
All-in-One WP Migration <= 7.62 - Unauthenticated Reflected Cross-Site Scripting
All-in-One WP Migration <= 7.62 - Authenticated (Admin+) Cross-Site Scripting
All-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows Hosts
All-in-One WP Migration <= 7.40 - Authenticated (Admin+) Arbitrary File Upload
All-in-One WP Migration <= 7.14 - Unauthenticated Backup Download
All-in-One WP Migration <= 6.97 - Authenticated Stored Cross-Site Scripting
All-in-One WP Migration <= 6.45 - Reflected Cross-Site Scripting
All-in-One WP Migration <= 2.0.4 - Missing Authorization to Database Export
All-in-One WP Migration <= 2.0.2 - Authorization Bypass to Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.