SServMask

Products

Exploited and recent CVEs

• CVE-2026-89064 Medium 5.3 All-in-One WP Migration and Backup <= 7.110 - Unauthenticated Insufficient Credential Protection via Authorization Basic Header 0.5%
• CVE-2026-6128 Medium 6.4 All-in-One WP Migration Unlimited Extension <= 2.84 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ai1wm_backups_path' Parameter 0.3%
• CVE-2026-19949 High 8.8 All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution 1.0%
• CVE-2026-5753 Medium 6.5 All-in-One WP Migration Unlimited Extension <= 2.83 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Backup Schedule Creation and Backup File Download 0.3%
• CVE-2025-8490 Medium 4.4 All-in-One WP Migration and Backup <= 7.97 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import 0.2%
• CVE-2024-10942 High 7.5 All in One WP Migration <= 7.89 - Unauthenticated PHP Object Injection 0.6%
• CVE-2024-9162 High 7.2 All-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code Injection 2.7%
• CVE-2024-8852 Medium 5.3 All-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error Logs 1.2%
• CVE-2023-40004 High 7.3 Unauth. Access Token Manipulation vulnerability in multiple ServMask WordPress plugins 11.0%
• CVE-2023-40004 High 7.3 Unauth. Access Token Manipulation vulnerability in multiple ServMask WordPress plugins 11.0%
• CVE-2023-40004 High 7.3 Unauth. Access Token Manipulation vulnerability in multiple ServMask WordPress plugins 11.0%
• CVE-2023-40004 High 7.3 Unauth. Access Token Manipulation vulnerability in multiple ServMask WordPress plugins 11.0%
• CVE-2022-1476 Medium 6.6 All-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows Hosts 46.3%