Known vulnerabilities in the Migration plugin
19 security advisories have been published for the Migration plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Migration - Remote Code Execution (CVE-2026-13457) HIGH
- Migration - SQL Injection (CVE-2026-17555) MEDIUM
- Migration - Remote Code Execution (CVE-2026-10795) HIGH
- Migration - Remote Code Execution (CVE-2026-1357) CRITICAL
- Migration - Security Vulnerability (CVE-2025-12654) LOW
- Migration - Remote Code Execution (CVE-2025-5961) HIGH
- Migration - Path Traversal (CVE-2025-2636) CRITICAL
- Migration - Cross-Site Request Forgery (CSRF) (CVE-2024-13913) HIGH
- Migration - Remote Code Execution (CVE-2024-13869) HIGH
- Migration - Cross-Site Scripting (XSS) (CVE-2025-0215) MEDIUM
- Migration - PHP Object Injection (CVE-2024-10957) HIGH
- Migration - Authentication Bypass (CVE-2024-6397) CRITICAL
- Migration - Broken Access Control (CVE-2024-4898) CRITICAL
- Migration - Broken Access Control (CVE-2024-3546) MEDIUM
- Migration - Security Vulnerability (CVE-2024-2667) CRITICAL
- Migration - PHP Object Injection (CVE-2024-3054) HIGH
- Migration - Cross-Site Scripting (XSS) (CVE-2023-5738) MEDIUM
- Migration - Security Vulnerability (CVE-2023-5737) MEDIUM
- Migration - Cross-Site Request Forgery (CSRF) (CVE-2023-5982) MEDIUM