Read the docs

servmask

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

servmask records in CISA KEV

No servmask vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
All-in-one Wp Migration 3 records MEDIUM One-stop Wp Migration 1 record LOW

Records

1 record in One-stop Wp Migration · all components

TI-2021-06508 CVE-2021-24216 · GHSA-29x7-c2jf-9r9c

All-in-One WP Migration < 7.41 - Admin+ Arbitrary File Upload to RCE

Priority LOW 35

The All-in-One WP Migration WordPress plugin before 7.41 does not validate uploaded files' extension, which allows administrators to upload PHP files on their site, even on multisite installations.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01713 Published 2022-03-07 Fixed in 7.41 CWE-434
Open these records in search →