Servmask

7 CVEs across 8 Servmask products. Browse Servmask vulnerabilities, severities, and proof-of-concept exploits.

Servmask products with known CVEs

ProductCVEs
All-In-One Wp Migration And Backup5
All-In-One Wp Migration3
All-In-One Wp Migration Box Extension1
All-In-One Wp Migration Dropbox Extension1
All-In-One Wp Migration Google Drive Extension1
All-In-One Wp Migration Onedrive Extension1
All-In-One Wp Migration Unlimited Extension1
One-Stop Wp Migration1
Servmask CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-5753Medium6.52026-05-06The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.83. This is due…
CVE-2025-8490Medium4.42025-08-27The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Import in all versions up to, and including, 7…
CVE-2024-10942High7.52025-03-13The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.89 via deserializatio…
CVE-2024-9162High7.22024-10-28The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to arbitrary PHP Code Injection due to missing file type validation during the export…
CVE-2024-8852Medium5.32024-10-22The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.86 through…
CVE-2023-40004High7.32024-06-19Missing Authorization vulnerability in ServMask All-in-One WP Migration Box Extension, ServMask All-in-One WP Migration OneDrive Extension, ServMask All-in-One…
CVE-2022-2546Medium4.72023-02-02The All-in-One WP Migration WordPress plugin before 7.63 uses the wrong content type, and does not properly escape the response from the ai1wm_export AJAX acti…
CVE-2022-1476Medium6.62022-05-10The All-in-One WP Migration plugin for WordPress is vulnerable to arbitrary file deletion via directory traversal due to insufficient file validation via the ~…
CVE-2021-24216High7.22022-03-07The All-in-One WP Migration WordPress plugin before 7.41 does not validate uploaded files' extension, which allows administrators to upload PHP files on their…