Read the docs

servmask

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

servmask records in CISA KEV

No servmask vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
All-in-one Wp Migration 3 records MEDIUM One-stop Wp Migration 1 record LOW

Records

3 records in All-in-one Wp Migration · all components

TI-2022-01350 CVE-2022-1476 · GHSA-qjj4-mxpm-p3m8

All-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows Hosts

Priority MEDIUM 59

The All-in-One WP Migration plugin for WordPress is vulnerable to arbitrary file deletion via directory traversal due to insufficient file validation via the ~/lib/model/class-ai1wm-backups.php file, in versions up to, a…

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.46268 Published 2022-05-10 No fix listed CWE-22
TI-2022-02352 CVE-2022-2546 · GHSA-qfjr-7vg6-v99x

All-in-One WP Migration < 7.63 - Unauthenticated Reflected XSS

Priority MEDIUM 55

The All-in-One WP Migration WordPress plugin before 7.63 uses the wrong content type, and does not properly escape the response from the ai1wm_export AJAX action, allowing an attacker to craft a request that when submitt…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.01204 Published 2023-02-02 Fixed in 7.63
Open these records in search →