Missing Authorization vulnerability Affects All-in-One WP Migration Box Extension

CVE-2023-40004

Summary

A missing authorization vulnerability has been identified in multiple extensions of the ServMask All-in-One WP Migration plugin. This flaw allows unauthorized access to sensitive functionalities, enabling potential attackers to manipulate access tokens across the affected extensions. The vulnerability impacts specific versions of the Box, OneDrive, Dropbox, and Google Drive extensions, leaving installations of the All-in-One WP Migration plugin susceptible to exploitation. Users of these extensions should assess their current versions and apply necessary updates to mitigate risks associated with unauthorized access.

References