CVE-2026-89064 | CVSS: 5.3 | 严重级别: MEDIUM
The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Insufficient Credential Protection in versions up to, and including, 7.110. This is due to the `Ai1wm_Main_Controller::init()` method — registered on the `admin_init` hook, which fires unauthenticated on `admin-ajax.php` and `admin-post.php` requests — reading `$_SERVER['PHP_AUTH_USER']` and `$_SERVER['PHP_AUTH_PW']` from any incoming request and writing them to the `ai1wm_auth_header` option via `update_option()` as a reversible base64-encoded string, with no capability check, nonce verification, `is_user_logged_in()
参考链接:
• https://plugins.trac.wordpress.org/browser/all-in-one-wp-migration/tags/7.110/li
• https://plugins.trac.wordpress.org/browser/all-in-one-wp-migration/tags/7.110/li
• https://plugins.trac.wordpress.org/browser/all-in-one-wp-migration/tags/7.110/li
📌 数据来源: NVD 官方