Advisories · Technology
wpvividplugins WPvivid — Backup, Migration & Staging.
Every CVE that names wpvividplugins WPvivid — Backup, Migration & Staging among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.9 Medium
WPvivid <= 0.9.131 - Authenticated (Administrator+) SQL Injection via 'export_data' Parameter
- wpvividplugins WPvivid — Backup, Migration & Staging
- SQL injection
- CVSS 3.8 Low
Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletion
- wpvividplugins WPvivid — Backup, Migration & Staging
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload
- wpvividplugins WPvivid — Backup, Migration & Staging
- Unrestricted file upload
- CVSS 2.7 Low
Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation
- wpvividplugins WPvivid — Backup, Migration & Staging
- Path traversal
- CVSS 7.2 HighCritical · CVSS 7+ and EPSS
Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload
- wpvividplugins WPvivid — Backup, Migration & Staging
- Unrestricted file upload
- CVSS 7.2 High
Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file
- wpvividplugins WPvivid — Backup, Migration & Staging
- Unrestricted file upload
- CVSS 8.8 High
Migration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection
- wpvividplugins WPvivid — Backup, Migration & Staging
- Insecure deserialization
- CVSS 8.8 High
Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload
- wpvividplugins WPvivid — Backup, Migration & Staging
- Unrestricted file upload
- CVSS 4.9 Medium
Migration, Backup, Staging – WPvivid <= 0.9.35 - Sensitive Information Disclosure
- wpvividplugins WPvivid — Backup, Migration & Staging
- Information disclosure
- CVSS 7.2 HighCritical · CVSS 7+ and EPSS
WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization
- wpvividplugins WPvivid — Backup, Migration & Staging
- Insecure deserialization
- CVSS 6.5 Medium
WPvivid Backup and Migration <= 0.9.68 - Missing Authorization
- wpvividplugins WPvivid — Backup, Migration & Staging
- Broken access control
- CVSS 4.3 Medium
WPvivid <= 0.9.94 - Missing Authorization
- wpvividplugins WPvivid — Backup, Migration & Staging
- Broken access control
- CVSS 4.4 Medium
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Stored Cross-Site Scripting
- wpvividplugins WPvivid — Backup, Migration & Staging
- Cross-site scripting (XSS)
- CVSS 8.0 High
Migration, Backup, Staging – WPvivid <= 0.9.91 - Google Drive Client Secret Exposure
- wpvividplugins WPvivid — Backup, Migration & Staging
- Information disclosure
- CVSS 4.4 Medium
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting
- wpvividplugins WPvivid — Backup, Migration & Staging
- Cross-site scripting (XSS)
- CVSS 7.2 High
Migration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization
- wpvividplugins WPvivid — Backup, Migration & Staging
- Insecure deserialization