What’s Vulnerable › Products
wpvividplugins WPvivid — Backup, Migration & Staging vulnerabilities
24 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.
Check whether your wpvividplugins WPvivid — Backup, Migration & Staging version is affected
Latest wpvividplugins WPvivid — Backup, Migration & Staging vulnerabilities
- CVE-2026-17555 — WPvivid <= 0.9.131 - Authenticated (Administrator+) SQL Injection via 'export_data' Parameter (CVSS 4.9)
- CVE-2025-12656 — Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletion (CVSS 3.8)
- CVE-2026-1357 — Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload (CVSS 9.8)
- CVE-2025-12654 — Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation (CVSS 2.7)
- CVE-2025-5961 — Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload (CVSS 7.2)
- CVE-2024-56273 — WordPress WPvivid Backup plugin <= 0.9.106 - Broken Access Control vulnerability (CVSS 9.8)
- CVE-2024-10962 — Migration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection (CVSS 8.8)
- CVE-2020-36842 — Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8)
- CVE-2020-36835 — Migration, Backup, Staging – WPvivid <= 0.9.35 - Sensitive Information Disclosure (CVSS 6.5)
- CVE-2024-7315 — Migration, Backup, Staging – WPvivid < 0.9.106 - Unauthenticated Sensitive Data Exposure (CVSS 7.5)
- CVE-2023-41243 — WordPress WPvivid Backup Plugin plugin <= 0.9.90 - Privilege Escalation on Staging Environment vulnerability (CVSS 8.8)
- CVE-2024-3054 — WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization (CVSS 7.2)
- CVE-2024-1982 — WPvivid Backup and Migration <= 0.9.68 - Missing Authorization (CVSS 9.1)
- CVE-2024-1981 — (CVSS 9.1)
- CVE-2023-4637 — WPvivid <= 0.9.94 - Missing Authorization (CVSS 5.3)
- CVE-2023-5121 — Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 4.8)
- CVE-2023-5576 — Migration, Backup, Staging – WPvivid <= 0.9.91 - Google Drive Client Secret Exposure (CVSS 9.3)
- CVE-2023-5120 — Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting (CVSS 4.8)
- CVE-2023-4274 — (CVSS 6.5)
- CVE-2022-2863 — WPvivid Backup < 0.9.76 - Admin+ Arbitrary File Read (CVSS 4.9)
- CVE-2022-2442 — Migration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization (CVSS 7.2)
- CVE-2022-27844 — WordPress WPvivid plugin <= 0.9.70 - Arbitrary File Read vulnerability (CVSS 7.5)
- CVE-2022-0531 — WPvivid Backup and Migration Plugin < 0.9.70 - Reflected Cross-Site Scripting (CVSS 6.1)
- CVE-2021-24994 — WPvivid Backup and Migration Plugin < 0.9.69 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1)