CVE-2025-11427

Name of the Vulnerable Software and Affected Versions WP Migrate Lite – WordPress Migration Made Easy plugin versions prior to 2.7.7

Description The WP Migrate Lite – WordPress Migration Made Easy plugin for WordPress is susceptible to a Blind Server-Side Request Forgery. This allows unauthenticated attackers to make web requests to arbitrary locations originating from the web application. Exploitation of this issue could allow attackers to obtain information about internal services via the wpmdb flush API endpoint.

Recommendations Update the WP Migrate Lite – WordPress Migration Made Easy plugin to version 2.7.7 or later.