PT-2026-73119
CVE-2026-17533
·
Published
2026-08-16
·
Updated
2026-08-20
Description by
CVSS 3.1
7.2
HighMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
All-in-One WP Migration and Backup WordPress plugin versions prior to 7.108
Description
On multisite installations, the migration import functionality is not restricted to network administrators. This allows an administrator of a single subsite to execute arbitrary PHP code across the entire network. PHP is a server-side scripting language used primarily for web development.
Recommendations
Update the plugin to version 7.108 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾