Input validation vulnerability in All-in-One WP Migration and Backup 7.86

The All-in-One WP Migration and Backup plugin for WordPress has a security issue that allows attackers to inject malicious code into a website. This can happen when exporting a backup and the plugin does not properly check the file type. Attackers who have Administrator-level access or higher can create a backup with a .php extension, allowing them to add their own code and potentially execute it remotely.