Input validation vulnerability in All-in-One WP Migration and Backup 7.89

A popular plugin for WordPress called “All-in-One WP Migration and Backup” has a security issue that allows attackers to inject harmful code into a website. This vulnerability affects all versions up to 7.89, and can be exploited by anyone without authentication. If the website has additional plugins or themes that contain malicious code, the attacker could potentially delete files, access sensitive information, or run their own code on the website. The exploit can only be triggered if an administrator performs a backup and restore using the plugin.