CVE-2024-9162: All-in-One WP Migration and Backup <= 7.86 - Authenticated (Administrator+) Arbitrary PHP Code Injection
First published: Mon Oct 28 2024(Updated: )
The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to arbitrary PHP Code Injection due to missing file type validation during the export in all versions up to, and including, 7.86. This makes it possible for authenticated attackers, with Administrator-level access and above, to create an export file with the .php extension on the affected site's server, adding an arbitrary PHP code to it, which may make remote code execution possible.
Credit: security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All-in-One WP Migration | <=7.86 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.wordfence.com/threat-intel/vulnerabilities/id/d97c3379-56c9-4261-9a70-3119ec121a40?source=cve
- https://plugins.trac.wordpress.org/browser/all-in-one-wp-migration/trunk/lib/controller/class-ai1wm-backups-controller.php#L60
- https://plugins.trac.wordpress.org/browser/all-in-one-wp-migration/trunk/lib/controller/class-ai1wm-export-controller.php#L36
- https://github.com/d0n601/CVE-2024-9162
- https://ryankozak.com/posts/CVE-2024-9162
Frequently Asked Questions
What is the severity of CVE-2024-9162?
CVE-2024-9162 has a critical severity rating due to the potential for arbitrary PHP code execution.
Who is affected by CVE-2024-9162?
CVE-2024-9162 affects users of the All-in-One WP Migration and Backup plugin for WordPress, specifically those using versions up to 7.86.
How do I fix CVE-2024-9162?
To fix CVE-2024-9162, update the All-in-One WP Migration and Backup plugin to the latest version beyond 7.86.
What can an attacker do with CVE-2024-9162?
An authenticated attacker can exploit CVE-2024-9162 to inject arbitrary PHP code, potentially gaining full control over the affected WordPress site.
Is there a patch available for CVE-2024-9162?
Yes, a patch is included in the plugin updates following version 7.86 to address the vulnerability in CVE-2024-9162.
- agent/references
- agent/title
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/type
- agent/severity
- agent/author
- agent/event
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- agent/trending
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/all-in-one wp migration
- canonical/all-in-one wp migration