CVE-2025-8490

Name of the Vulnerable Software and Affected Versions: All-in-One WP Migration and Backup versions through 7.97

Description: The All-in-One WP Migration and Backup plugin for WordPress is susceptible to Stored Cross-Site Scripting through the Import function. Insufficient input sanitization and output escaping allow authenticated attackers with administrator-level access to inject arbitrary web scripts into pages. This vulnerability only affects multi-site installations and installations where unfiltered html has been disabled.

Recommendations: Update to version 7.98 or later to address the security issue.