servmask Vulnerabilities and Affected Products
Vulnerabilities associated with all-in-one_wp_migration.
Products
Clear product- All-in-One WP Migration and Backup5 vulnerabilities
- all-in-one_wp_migration2 vulnerabilities
- All-in-One WP Migration Box Extension1 vulnerability
- All-in-One WP Migration Dropbox Extension1 vulnerability
- All-in-One WP Migration Google Drive Extension1 vulnerability
- All-in-One WP Migration OneDrive Extension1 vulnerability
- All-in-One WP Migration Unlimited Extension1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-8852MEDIUM | All-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error LogsThe All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.86 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information such as full paths contained in the exposed log files. | CVSS5.3v3.1 | EPSS1.21% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |
CVE-2023-40004HIGH | Unauth. Access Token Manipulation vulnerability in multiple ServMask WordPress pluginsMissing Authorization vulnerability in ServMask All-in-One WP Migration Box Extension, ServMask All-in-One WP Migration OneDrive Extension, ServMask All-in-One WP Migration Dropbox Extension, ServMask All-in-One WP Migration Google Drive Extension.This issue affects All-in-One WP Migration Box Extension: from n/a through 1.53; All-in-One WP Migration OneDrive Extension: from n/a through 1.66; All-in-One WP Migration Dropbox Extension: from n/a through 3.75; All-in-One WP Migration Google Drive E… CWE-862Jun 19, 2024 | CVSS7.3v3.1 | EPSS9.75% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |