Unauthenticated Denial of Service Attack in Migrate Guru - Site Migration & Cloning Plugin
CVE-2026-84778

7.5HIGH

Key Information:

Vendor

WordPress
Status
Migrate Guru – Site Migration & Cloning
Vendor
CVE Published:
3 September 2026

What is CVE-2026-84778?

A vulnerability in the Migrate Guru – Site Migration & Cloning plugin allows attackers to execute unauthenticated denial of service attacks. This affects versions up to 6.65, enabling potential disruption in service and preventing legitimate users from accessing the affected sites. It is crucial for users of this plugin to implement security measures and apply updates promptly to safeguard their installations.

Affected Version(s)

Migrate Guru – Site Migration &amp; Cloning <= 6.65

References

https://patchstack.com/database/wordpress/plugin/migrate-...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program
.