Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24216

All-in-One WP Migration < 7.41 - Admin+ Arbitrary File Upload to RCE

Description

The All-in-One WP Migration WordPress plugin before 7.41 does not validate uploaded files' extension, which allows administrators to upload PHP files on their site, even on multisite installations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown All-in-One WP Migration

  • 7.41 to < 7.41affected

References