CVE-2026-81810

The All-in-One WP Migration and Backup WordPress plugin prior to version 7.111 fails to perform capability checks on several of its AJAX actions , instead gating them only on an installation-wide secret. That secret is disclosed to any user permitted to export the site, allowing such a user to im...