Vulnerability Discovered in All-in-One WP Migration WordPress Plugin < 7.15

All-in-One WP Migration WordPress plugin has 2+ million active installations and can be used export your WordPress website including the database, media files, plugins and themes with no technical knowledge required. In versions prior to 7.15, there is a vulnerability that allows attackers to download backup files from any site using the plugin.

The issue has been fixed in Version 7.15 which is available now from the WordPress Plugin Repo.