Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: wpvividplugins Component: Wpvivid Backup & Migration Clear all filters
TI-2024-12890 CVE-2024-13869 · GHSA-6wm7-ww95-2pjw

Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file

Priority HIGH 67

The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_files' function in all versions up to, and inclu…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02266 Published 2025-02-22 No fix listed CWE-434