What is GHSA-qgjj-8h65-3vcm?

GHSA-qgjj-8h65-3vcm is a security advisory published by GitHub Security Advisories with High severity. The All-in-One WP Migration and Backup WordPress plugin before 7.108 does not restrict its...

Which CVE IDs does GHSA-qgjj-8h65-3vcm cover?

GHSA-qgjj-8h65-3vcm covers the following CVE IDs: CVE-2026-17533. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qgjj-8h65-3vcm?

GHSA-qgjj-8h65-3vcm has a CVSS v3 base score of 7.2, published by GitHub Security Advisories.

GHSA-qgjj-8h65-3vcmHighCVSS 7.2

The All-in-One WP Migration and Backup WordPress plugin before 7.108 does not restrict its...

Vendor

GitHub Security Advisories

Published

August 16, 2026

Last Modified

August 17, 2026

🔗 CVE IDs covered (1)

CVE-2026-17533 →

📋 Description

The All-in-One WP Migration and Backup WordPress plugin before 7.108 does not restrict its migration import functionality to network administrators on multisite installations, allowing an administrator of a single subsite to execute arbitrary PHP code across the entire network.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-17533
https://wpscan.com/vulnerability/13b57cdc-d954-4db6-94c2-53ad04ab0d34
https://github.com/advisories/GHSA-qgjj-8h65-3vcm