These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Insufficient Credential Protection in versions up to, and including, 7.110. This vulnerability allows unauthenticated attackers to capture and store WordPress Application Passwords or HTTP Basic credentials in reversible base64 form. The `Ai1wm_Main_Controller::init()` method reads `$_SERVER['PHP_AUTH_USER']` and `$_SERVER['PHP_A [truncated]
The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection via archive restore functionality in all versions up to, and including, 7.109. This vulnerability allows unauthenticated attackers to append additional SQL queries into existing queries, potentially leading to sensitive information disclosure. The vulnerability is caused by insufficient escaping on user-supplied par [truncated]
The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.83. This is due to the 'Ai1wmve_Schedules_Controller::save' handler for 'admin_post_ai1wm_schedule_event_save' not verifying user capabilities before saving schedule data. This makes it possible for authenticated attackers, with subscriber-level access and above, [truncated]