Vulnerability Description
Missing Authorization vulnerability in ServMask All-in-One WP Migration Box Extension, ServMask All-in-One WP Migration OneDrive Extension, ServMask All-in-One WP Migration Dropbox Extension, ServMask All-in-One WP Migration Google Drive Extension.This issue affects All-in-One WP Migration Box Extension: from n/a through 1.53; All-in-One WP Migration OneDrive Extension: from n/a through 1.66; All-in-One WP Migration Dropbox Extension: from n/a through 3.75; All-in-One WP Migration Google Drive Extension: from n/a through 2.79.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://patchstack.com/articles/pre-auth-access-token-manipulation-in-all-in-one
- https://patchstack.com/database/vulnerability/all-in-one-wp-migration-box-extens
- https://patchstack.com/database/vulnerability/all-in-one-wp-migration-dropbox-ex
- https://patchstack.com/database/vulnerability/all-in-one-wp-migration-gdrive-ext
- https://patchstack.com/database/vulnerability/all-in-one-wp-migration-onedrive-e
- https://patchstack.com/articles/pre-auth-access-token-manipulation-in-all-in-one
- https://patchstack.com/database/vulnerability/all-in-one-wp-migration-box-extens
- https://patchstack.com/database/vulnerability/all-in-one-wp-migration-dropbox-ex
- https://patchstack.com/database/vulnerability/all-in-one-wp-migration-gdrive-ext
- https://patchstack.com/database/vulnerability/all-in-one-wp-migration-onedrive-e
FAQ
What is CVE-2023-40004?
CVE-2023-40004 is a vulnerability with a CVSS score of 7.3 (HIGH). Missing Authorization vulnerability in ServMask All-in-One WP Migration Box Extension, ServMask All-in-One WP Migration OneDrive Extension, ServMask All-in-One WP Migration Dropbox Extension, ServMask...
How severe is CVE-2023-40004?
CVE-2023-40004 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-40004?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.