Vulnerabilities in ServMask
9 resultsVexday analysis
ServMask apresenta perfil de risco baixo com apenas 1 vulnerabilidade registrada na base, sem exploração ativa documentada nem severidade crítica. A falha identificada refere-se a controle de acesso inadequado (CWE-862), mas não representa ameaça imediata dado o histórico desatualizado.
CVE-2022-1476MEDIUMAll-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows HostsEPSS 47.1%CVE-2023-40004HIGHUnauth. Access Token Manipulation vulnerability in multiple ServMask WordPress pluginsEPSS 11.0%CVE-2024-9162HIGHAll-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code InjectionEPSS 2.7%CVE-2024-8852MEDIUMAll-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error LogsEPSS 1.2%CVE-2024-10942HIGHAll in One WP Migration <= 7.89 - Unauthenticated PHP Object InjectionEPSS 0.6%CVE-2026-19949HIGHAll-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code ExecutionEPSS 0.5%CVE-2026-5753MEDIUMAll-in-One WP Migration Unlimited Extension <= 2.83 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Backup Schedule Creation and Backup File DownloadEPSS 0.3%CVE-2026-6128MEDIUMAll-in-One WP Migration Unlimited Extension <= 2.84 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ai1wm_backups_path' ParameterEPSS 0.2%CVE-2025-8490MEDIUMAll-in-One WP Migration and Backup <= 7.97 - Authenticated (Administrator+) Stored Cross-Site Scripting via ImportEPSS 0.2%