All-in-One WP Migration and Backup

A flaw in the find-and-replace routine used when restoring a backup archive lets a crafted database value ending in an escaped backslash break out of its SQL string literal and append arbitrary SQL to the restore query. An authenticated user with permission to import an archive (or anyone able to supply an archive that an administrator restores) can execute arbitrary SQL statements, which can be escalated to remote code execution. All versions up to and including 7.109 are affected.

This vulnerability affects the following application versions:

• All-in-One WP Migration and Backup 7.76
• All-in-One WP Migration and Backup 7.77
• All-in-One WP Migration and Backup 7.78
• All-in-One WP Migration and Backup 7.79
• All-in-One WP Migration and Backup 7.80
• All-in-One WP Migration and Backup 7.81
• All-in-One WP Migration and Backup 7.82
• All-in-One WP Migration and Backup 7.83
• All-in-One WP Migration and Backup 7.84
• All-in-One WP Migration and Backup 7.85
• All-in-One WP Migration and Backup 7.86
• All-in-One WP Migration and Backup 7.87
• All-in-One WP Migration and Backup 7.88
• All-in-One WP Migration and Backup 7.89
• All-in-One WP Migration and Backup 7.90
• All-in-One WP Migration and Backup 7.91
• All-in-One WP Migration and Backup 7.92
• All-in-One WP Migration and Backup 7.93
• All-in-One WP Migration and Backup 7.94
• All-in-One WP Migration and Backup 7.95
• All-in-One WP Migration and Backup 7.96
• All-in-One WP Migration and Backup 7.97
• All-in-One WP Migration and Backup 7.98
• All-in-One WP Migration and Backup 7.99
• All-in-One WP Migration and Backup 7.100
• All-in-One WP Migration and Backup 7.101
• All-in-One WP Migration and Backup 7.102
• All-in-One WP Migration and Backup 7.103
• All-in-One WP Migration and Backup 7.104
• All-in-One WP Migration and Backup 7.105
• All-in-One WP Migration and Backup 7.106
• All-in-One WP Migration and Backup 7.107
• All-in-One WP Migration and Backup 7.108
• All-in-One WP Migration and Backup 7.109

The All-in-One WP Migration plugin incorrectly applies stripslashes_deep() to the $_FILES superglobal. This function is designed for string data like $_POST or $_GET, not for file upload metadata. Applying it to $_FILES can corrupt file paths or names, potentially leading to path traversal or unexpected file handling behavior.

This vulnerability affects the following application versions:

• All-in-One WP Migration and Backup 7.98

This security patch hardens your database migration tools by replacing PHP’s error-prone unserialize() with a safe, in-house parser that prevents tampering and malformed payloads.

This vulnerability affects the following application versions:

• All-in-One WP Migration and Backup 7.76
• All-in-One WP Migration and Backup 7.77
• All-in-One WP Migration and Backup 7.78
• All-in-One WP Migration and Backup 7.79
• All-in-One WP Migration and Backup 7.80
• All-in-One WP Migration and Backup 7.81
• All-in-One WP Migration and Backup 7.82
• All-in-One WP Migration and Backup 7.83
• All-in-One WP Migration and Backup 7.84
• All-in-One WP Migration and Backup 7.85
• All-in-One WP Migration and Backup 7.86
• All-in-One WP Migration and Backup 7.87
• All-in-One WP Migration and Backup 7.88
• All-in-One WP Migration and Backup 7.89