All-in-One WP Migration, cbbc0397ed1450f5043bdc556d2a97218f58b770

CVE, Research URL: cbbc0397ed1450f5043bdc556d2a97218f58b770
Home page URL: Security reports for All-in-One WP Migration
Application: All-in-One WP Migration
Published on: Mar 19, 2015
Research Description: All-in-One WP Migration and Backup [all-in-one-wp-migration] < 2.0.5 All-in-One WP Migration <= 2.0.4 - Missing Authorization to Database Export The All-in-One WP Migration plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'router()' function in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to export a complete copy of the vulnerable service's database.
Affected versions: max 2.0.5.
Status: vulnerable