The All-in-One WP Migration Unlimited Extension plugin for WordPress up to version 2.83 has a missing authorization vulnerability. This flaw allows authenticated users with subscriber-level access or higher to create scheduled export jobs and send backup notifications to attacker-controlled email addresses. These notifications include random backup filenames, enabling attackers to download full site backups and expose sensitive information.