Description
WordPress Plugin All-in-One WP Migration is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. WordPress Plugin All-in-One WP Migration version 7.0 is vulnerable.
Remediation
Update to plugin version 7.1 or latest
References
Related Vulnerabilities
Joomla Improper Input Validation Vulnerability (CVE-2015-8564)
WordPress Plugin Wise Chat CSV Injection (2.8.3)
WordPress Plugin WordPress Backup and Migrate-Backup Guard Arbitrary File Upload (1.5.9)
WordPress Plugin Community Events SQL Injection (1.3.5)
PrestaShop Files or Directories Accessible to External Parties Vulnerability (CVE-2020-5250)