CyberRota Analysis
AI-GeneratedThe All-in-One WP Migration and Backup plugin for WordPress prior to version 7.111 lacks proper capability checks on several AJAX actions, allowing users with export permissions to import arbitrary site archives and potentially gain administrator access. This vulnerability primarily affects WordPress installations where an administrator has mistakenly granted export capabilities to a lower-privileged role. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk of unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The All-in-One WP Migration and Backup WordPress plugin before 7.111 does not perform any capability check on several of its AJAX actions, gating them only on an installation-wide secret which it discloses to any user permitted to export the site, allowing such a user to import an arbitrary site archive and gain administrator access. Exploitation requires an administrator to have granted the export capability to a role that does not hold the All-in-One WP Migration and Backup WordPress plugin before 7.111's own import capability, which is not a default configuration.