| Reporter | Title | Published | Views | Family All 16 |
|---|---|---|---|---|
 | Exploit for CVE-2022-2546 | 19 Sep 202414:05 | – | githubexploit |
 | CVE-2022-2546 | 2 Feb 202312:14 | – | circl |
 | WordPress Plugin All-in-One WP Migration 跨站脚本漏洞 | 2 Feb 202300:00 | – | cnnvd |
 | CVE-2022-2546 All-in-One WP Migration < 7.63 - Unauthenticated Reflected XSS | 2 Feb 202308:28 | – | cvelist |
 | CVE-2022-2546 | 2 Sep 202611:45 | – | kitploit |
 | QNAP QTS and Photo Station 6.0.3 - Remote Command Execution | 31 Aug 202605:18 | – | nuclei |
| WordPress All-in-One WP Migration <=7.62 - Cross-Site Scripting | 2 Sep 202607:49 | – | nuclei |
 | CVE-2022-2546 | 2 Feb 202309:15 | – | nvd |
 | WordPress All-in-One WP Migration Plugin < 7.63 XSS Vulnerability | 3 Feb 202300:00 | – | openvas |
 | CVE-2022-2546 | 2 Feb 202309:15 | – | osv |
10
Node
[
{
"vendor": "Unknown",
"product": "All-in-One WP Migration",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "7.63"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| archive | request body | wp-admin/admin-ajax.php?action=ai1wm_export&ai1wm_import=1 | Exploits improper escaping and content type in ai1wm_export AJAX action to inject arbitrary HTML/JS via the archive parameter in a crafted POST request. | CWE-79 |
| secret_key | request body | wp-admin/admin-ajax.php?action=ai1wm_export&ai1wm_import=1 | Exploits improper escaping and content type in ai1wm_export AJAX action to inject arbitrary HTML/JS via the archive parameter in a crafted POST request. | CWE-79 |
| ai1wm_manual_export | request body | wp-admin/admin-ajax.php?action=ai1wm_export&ai1wm_import=1 | Exploits improper escaping and content type in ai1wm_export AJAX action to inject arbitrary HTML/JS via the archive parameter in a crafted POST request. | CWE-79 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 04:42Current
4.7Medium risk
Vulners AI Score4.7
CVSS 3.14.7
EPSS0.01204
SSVC