Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2023-40004

Unauth. Access Token Manipulation vulnerability in multiple ServMask WordPress plugins

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Patchstack

Description

Missing Authorization vulnerability in ServMask All-in-One WP Migration Box Extension, ServMask All-in-One WP Migration OneDrive Extension, ServMask All-in-One WP Migration Dropbox Extension, ServMask All-in-One WP Migration Google Drive Extension.This issue affects All-in-One WP Migration Box Extension: from n/a through 1.53; All-in-One WP Migration OneDrive Extension: from n/a through 1.66; All-in-One WP Migration Dropbox Extension: from n/a through 3.75; All-in-One WP Migration Google Drive Extension: from n/a through 2.79.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ServMask All-in-One WP Migration Box Extension

Default version status: unaffected

  • n/a to ≤ 1.53affected

ServMask All-in-One WP Migration OneDrive Extension

Default version status: unaffected

  • n/a to ≤ 1.66affected

ServMask All-in-One WP Migration Dropbox Extension

Default version status: unaffected

  • n/a to ≤ 3.75affected

ServMask All-in-One WP Migration Google Drive Extension

Default version status: unaffected

  • n/a to ≤ 2.79affected

References