Wp Migrate Db Vulnerabilities

The WP Migrate Lite – Migration Made Easy plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.8. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged requ...

CVSS:

4.3

Affected:

up to 2.7.8

Fixed in:

2.7.9

Disclosed:

Jun 10, 2026

CVE-2026-49043 on NVD →

The WP Migrate Lite – WordPress Migration Made Easy plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.7.6 via the wpmdb_flush AJAX action. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the w...

CVSS:

5.8

Affected:

up to 2.7.6

Fixed in:

2.7.7

Disclosed:

Nov 17, 2025

CVE-2025-11427 on NVD →