CVE-2026-17533
All-in-One WP Migration and Backup < 7.108 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via REST Import
CVSS Score
7.2
EPSS Score
0.1%
EPSS Percentile
4th
The All-in-One WP Migration and Backup WordPress plugin before 7.108 does not restrict its migration import functionality to network administrators on multisite installations, allowing an administrator of a single subsite to execute arbitrary PHP code across the entire network.
| Vendor | unknown |
| Product | all-in-one wp migration and backup |
| Published | Aug 16, 2026 |
| Last Updated | Aug 17, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown all-in-one wp migration and backup
Be the first to know when new high vulnerabilities affecting unknown all-in-one wp migration and backup are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / All-in-One WP Migration and Backup
0 < 7.108
References
Credits
Mohamed Bassia WPScan