Skip to content
Sign in
7.2 High

CVE-2026-17533 The All-in-One WP Migration and Backup WordPress plugin before 7.108 does not restrict its migration import…

Description

The All-in-One WP Migration and Backup WordPress plugin before 7.108 does not restrict its migration import functionality to network administrators on multisite installations, allowing an administrator of a single subsite to execute arbitrary PHP code across the entire network.

Affected products and versions

Product Affected versions Fixed in
All-in-One WP Migration and Backup 7.108 earliest → < 7.108 7.108

Other CVEs of All-in-One WP Migration and Backup

The 3 CVEs of All-in-One WP Migration and Backup →
CVE-2026-81810 The All-in-One WP Migration and Backup WordPress plugin before 7.111 does not perform any capability check on several of… 7.2 High CVE-2026-12898 The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value… 6.5 Medium
Track this CVE