All-in-One WP Migration, 216b09f29c66d9a6edde078f27b48dc40435d52e

CVE, Research URL: 216b09f29c66d9a6edde078f27b48dc40435d52e
Home page URL: Security reports for All-in-One WP Migration
Application: All-in-One WP Migration
Published on: Nov 05, 2014
Research Description: All-in-One WP Migration and Backup [all-in-one-wp-migration] < 2.0.3 All-in-One WP Migration <= 2.0.2 - Authorization Bypass to Arbitrary File Upload The All-in-One WP Migration plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the import() function in versions up to, and including, 2.0.2. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to upload arbitrary files.
Affected versions: max 2.0.3.
Status: vulnerable