All-in-One WP Migration and Backup CVE Debriefs

All-in-One WP Migration and Backup CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH All-in-One WP Migration and Backup CVE published 2026-08-16

CVE-2026-17533

The All-in-One WP Migration and Backup WordPress plugin before 7.108 does not restrict its migration import functionality to network administrators on multisite installations, allowing an administrator of a single subsite to execute arbitrary PHP code across the entire network. This vulnerability has a high CVSS score of 7.2 and is classified as HIGH severity. The plugin's insufficient restrictions on mig [truncated]