Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

servmask vulnerabilities

10 published CVEs name servmask among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-89064

    All-in-One WP Migration and Backup <= 7.110 - Unauthenticated Insufficient Credential Protection via Authorization Basic Header

    servmask · All-in-One WP Migration and Backup

    Medium5.3
  • CVE-2026-6128

    All-in-One WP Migration Unlimited Extension <= 2.84 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'ai1wm_backups_path' Parameter

    servmask · All-in-One WP Migration Unlimited Extension

    Medium6.4
  • CVE-2026-19949

    All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution

    servmask · All-in-One WP Migration and Backup

    High8.8
  • CVE-2026-5753

    All-in-One WP Migration Unlimited Extension <= 2.83 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Backup Schedule Creation and Backup File Download

    servmask · All-in-One WP Migration Unlimited Extension

    Medium6.5
  • CVE-2025-8490

    All-in-One WP Migration and Backup <= 7.97 - Authenticated (Administrator+) Stored Cross-Site Scripting via Import

    servmask · All-in-One WP Migration and Backup

    Medium4.4
  • CVE-2024-10942

    All in One WP Migration <= 7.89 - Unauthenticated PHP Object Injection

    servmask · All-in-One WP Migration and Backup

    High7.5
  • CVE-2024-9162

    All-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code Injection

    servmask · All-in-One WP Migration and Backup

    High7.2
  • CVE-2024-8852

    All-in-One WP Migration and Backup <= 7.86 - Unauthenticated Information Disclosure via Error Logs

    servmask · All-in-One WP Migration and Backup

    Medium5.3
  • CVE-2023-40004

    Unauth. Access Token Manipulation vulnerability in multiple ServMask WordPress plugins

    ServMask · All-in-One WP Migration Box Extension

    High7.3
  • CVE-2022-1476

    All-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows Hosts

    servmask · All-in-One WP Migration and Backup

    Medium6.6
All 10 in the list