A vulnerability in the All-in-One WP Migration and Backup WordPress plugin allows an authenticated user with restricted privileges to escalate their access to administrator status.

This flaw involves improper privilege management (CWE-269) where AJAX actions lack sufficient capability checks. An attacker with existing export permissions can exploit the disclosure of an installation-wide secret to import malicious site archives, resulting in full administrative compromise.

The exploitation of this vulnerability leads to a total compromise of the affected WordPress site, as the attacker can gain administrative control. This risk is classified as high with a CVSS score of 7.2, reflecting the potential for unauthorized data access, complete system takeover, and significant reputational damage to the organization.

Immediate Action: Update the All-in-One WP Migration and Backup plugin to version 7.111 or later immediately.

Proactive Monitoring: Review WordPress user roles and permissions to ensure that the export capability is not granted to untrusted accounts. Monitor server access logs for unusual AJAX requests targeting the plugin endpoints.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block unauthorized or suspicious POST requests directed at the plugin's AJAX interface.

Public Exploit Available: No

Organizations utilizing this plugin must prioritize the update to version 7.111 to eliminate the risk of privilege escalation. Given the potential for total system compromise, administrators should audit current user roles to ensure that access is restricted to the principle of least privilege, preventing unauthorized users from reaching the vulnerable export functionality.