Description
WordPress的All-in-One WP Migration插件存在目录遍历漏洞，该漏洞是由于class-ai1wm-backups.php对用户提供的数据校验不足造成的。
WordPress All-in-One WP Migration插件CVE-2022-1476目录遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2022-1476
https://github.com/advisories/GHSA-qjj4-mxpm-p3m8
https://wpscan.com/vulnerability/6e233311-d8ea-4ed4-8959-6c88f786ceef/
https://patchstack.com/database/wordpress/plugin/all-in-one-wp-migration/vulnerability/wordpress-all-in-one-wp-migration-plugin-7-58-directory-traversal-to-file-deletion-on-windows-hosts-vulnerability
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/all-in-one-wp-migration/all-in-one-wp-migration-758-directory-traversal-to-file-deletion-on-windows-hosts
https://hackhalt.com/threat/cve-2022-1476/
https://www.fortiguard.com/encyclopedia/ips/51560
https://www.nsfocus.net/vulndb/66657