All-in-One WP Migration <= 6.97 - Authenticated Cross-Site Scripting (XSS)

An attacker would already have to be able to either compromise the database or gain access to a user account with high enough privileges to view the backup history, so some damage has already been done, but such an attacker could then also insert some XSS in order to compromise other admin users...

WordPress All-in-One WP Migration 6.83 SQL Injection

Exploit Title : WordPress All-in-One WP Migration Plugins 6.83 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 28/01/2019 Vendor Homepage : servmask.com Software Download Link : downloads.wordpress.org/plugin/all-in-one-wp-migration.6.83.zip Softwa...