WordPress News
All-in-One WP Migration and Backup 7.111 Released
What’s new in All-in-One WP Migration and Backup 7.111
Released: 2026-09-15
Active installations: 5,000,000
Tested up to WordPress 7.1
Requires PHP 5.3
Changelog
- Export and import now require the administrator capability. This closes a missing-authorization issue that allowed authenticated users without administrator privileges to run migrations. Credits to Charles Vosburgh for reporting it
- Backup actions (list, delete, label, browse, and download) are now restricted to users who can export or import
- HTTP authentication credentials are no longer captured for users who lack permission to run a migration. Credits to Jakub Herman for reporting it
- Backup list, archive browser, and downloads now fail closed with a clear error when the session has expired, instead of failing silently
- Export REST route no longer accepts malformed find-and-replace pairs (previously ignored silently)
- SQLite export no longer removes the substring STRICT from column names that contain it
Previous releases
7.110
- Find and replace on values ending in a backslash. Special thanks to Jack Taylor for responsibly disclosing this issue
- Wrong warning message when leaving the page during export
7.109
- File option in the Import From menu did not open the file picker, which prevented importing a backup from a local file