CVE-2026-5753

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-5753", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2026-04-07T16:14:53.795Z", "datePublished": "2026-05-06T03:27:21.807Z", "dateUpdated": "2026-05-06T12:57:42.449Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-05-06T03:27:21.807Z"}, "affected": [{"vendor": "servmask", "product": "All-in-One WP Migration Unlimited Extension", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.83", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.83. This is due to the 'Ai1wmve_Schedules_Controller::save' handler for 'admin_post_ai1wm_schedule_event_save' not verifying user capabilities before saving schedule data. This makes it possible for authenticated attackers, with subscriber-level access and above, to create scheduled export jobs and send backup notifications to attacker-controlled email addresses. Because such notifications include the random backup filename, full site backups can subsequently be downloaded from the target site, resulting in sensitive information exposure."}], "title": "All-in-One WP Migration Unlimited Extension <= 2.83 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Backup Schedule Creation and Backup File Download", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a8a31080-c124-49be-b9d1-7bc5abe7cbda?source=cve"}, {"url": "https://help.servmask.com/knowledgebase/unlimited-extension-changelog/"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-862 Missing Authorization", "cweId": "CWE-862", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "S\u00e9lim Lanouar"}], "timeline": [{"time": "2026-04-15T18:15:52.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2026-05-05T14:37:19.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-06T12:57:28.826646Z", "id": "CVE-2026-5753", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-06T12:57:42.449Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-5753", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-06T12:57:28.826646Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-06T12:57:36.834Z"}}], "cna": {"title": "All-in-One WP Migration Unlimited Extension <= 2.83 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Backup Schedule Creation and Backup File Download", "credits": [{"lang": "en", "type": "finder", "value": "S\u00e9lim Lanouar"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}}], "affected": [{"vendor": "servmask", "product": "All-in-One WP Migration Unlimited Extension", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "2.83"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2026-04-15T18:15:52.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2026-05-05T14:37:19.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a8a31080-c124-49be-b9d1-7bc5abe7cbda?source=cve"}, {"url": "https://help.servmask.com/knowledgebase/unlimited-extension-changelog/"}], "descriptions": [{"lang": "en", "value": "The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.83. This is due to the 'Ai1wmve_Schedules_Controller::save' handler for 'admin_post_ai1wm_schedule_event_save' not verifying user capabilities before saving schedule data. This makes it possible for authenticated attackers, with subscriber-level access and above, to create scheduled export jobs and send backup notifications to attacker-controlled email addresses. Because such notifications include the random backup filename, full site backups can subsequently be downloaded from the target site, resulting in sensitive information exposure."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-05-06T03:27:21.807Z"}}}, "cveMetadata": {"cveId": "CVE-2026-5753", "state": "PUBLISHED", "dateUpdated": "2026-05-06T12:57:42.449Z", "dateReserved": "2026-04-07T16:14:53.795Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2026-05-06T03:27:21.807Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "All-in-One WP Migration Unlimited Extension", "vendor": "servmask", "versions": [{"lessThanOrEqual": "2.83", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.83. This is due to the 'Ai1wmve_Schedules_Controller::save' handler for 'admin_post_ai1wm_schedule_event_save' not verifying user capabilities before saving schedule data. This makes it possible for authenticated attackers, with subscriber-level access and above, to create scheduled export jobs and send backup notifications to attacker-controlled email addresses. Because such notifications include the random backup filename, full site backups can subsequently be downloaded from the target site, resulting in sensitive information exposure."}, {"lang": "es", "value": "El plugin All-in-One WP Migration Unlimited Extension para WordPress es vulnerable a Autorizaci\u00f3n Faltante en versiones hasta la 2.83, inclusive. Esto se debe a que el gestor 'Ai1wmve_Schedules_Controller::save' para 'admin_post_ai1wm_schedule_event_save' no verifica las capacidades del usuario antes de guardar los datos de la programaci\u00f3n. Esto hace posible que atacantes autenticados, con acceso de nivel de suscriptor y superior, creen trabajos de exportaci\u00f3n programados y env\u00eden notificaciones de copia de seguridad a direcciones de correo electr\u00f3nico controladas por el atacante. Debido a que dichas notificaciones incluyen el nombre de archivo de copia de seguridad aleatorio, las copias de seguridad completas del sitio pueden ser descargadas posteriormente del sitio objetivo, lo que resulta en la exposici\u00f3n de informaci\u00f3n sensible."}], "id": "CVE-2026-5753", "lastModified": "2026-07-24T09:10:00.153", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-5753", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-05-06T12:57:28.826646Z", "version": "2.0.3"}}]}, "published": "2026-05-06T04:16:09.097", "references": [{"source": "security@wordfence.com", "url": "https://help.servmask.com/knowledgebase/unlimited-extension-changelog/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a8a31080-c124-49be-b9d1-7bc5abe7cbda?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,2.83]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "All-in-One WP Migration Unlimited Extension", "source": "cna", "vendor": "servmask"}, "product": "all-in-one_wp_migration_unlimited_extension", "vendor": "servmask"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": null}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "wordpress", "vendor": "wordpress"}], "created": "2026-05-06T05:30:25.741639+00:00", "updated": "2026-05-06T09:21:18.423967+00:00", "vendors": ["servmask", "servmask$PRODUCT$all-in-one_wp_migration_unlimited_extension", "wordpress", "wordpress$PRODUCT$wordpress"]}