Vulnerabilities (CVE)

Filtered by vendor Servmask Subscribe
Filtered by product One-stop Wp Migration
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-24216 1 Servmask 1 One-stop Wp Migration 2024-11-21 6.5 MEDIUM 7.2 HIGH
The All-in-One WP Migration WordPress plugin before 7.41 does not validate uploaded files' extension, which allows administrators to upload PHP files on their site, even on multisite installations.