Skip to content
ServMask All-in-One WP Migration Unlimited Extension
-
CVE-2026-6128
Medium 6.4
All-in-One WP Migration Unlimited Extension <= 2.84 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ai1wm_backups_path' Parameter
0.3%
-
CVE-2026-5753
Medium 6.5
All-in-One WP Migration Unlimited Extension <= 2.83 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Backup Schedule Creation and Backup File Download
0.3%