A critical SQL injection vulnerability in the All-in-One WP Migration and Backup plugin allows unauthenticated attackers to extract database information and achieve remote code execution.

The plugin contains an SQL injection flaw in its archive restore functionality due to insufficient input sanitization and lack of parameterization in SQL queries. While the CVSS score is 8.8, the ability for an unauthenticated attacker to extract the secret key and achieve remote code execution makes this a critical security event.

An attacker can extract the ai1wm_secret_key from the database, which is a precursor to achieving remote code execution on the underlying server. This could lead to total site takeover, data exfiltration, and significant reputational damage. The severity is high due to the potential for full compromise of the WordPress installation and its host.

Immediate Action: Update the All-in-One WP Migration and Backup plugin to version 7.110 or higher immediately.

Proactive Monitoring: Monitor database query logs for unusual activity or unexpected patterns originating from the archive restore functionality.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rules to detect and block common SQL injection patterns targeting WordPress plugins.

Public Exploit Available: Unknown.

This is a critical vulnerability that provides a clear path to remote code execution. All users of this plugin must update to version 7.110 immediately to eliminate this significant security risk.