Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WPvivid — Backup, Migration & Staging 0.9.134 Clear all filters
TI-2026-56680 CVE-2026-82194 · GHSA-jhr7-3vcm-f87v

WPvivid Backup & Migration < 0.9.134 - Admin+ Arbitrary File Deletion via Path Traversal

Priority LOW 25

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied path before using it in a file deletion routine, allowing administrators to delete arbitrary files on the server…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00335 Published 2026-09-04 Fixed in 0.9.134 CWE-73
TI-2026-56679 CVE-2026-82193 · GHSA-2355-wcqr-98j2

WPvivid Backup & Migration < 0.9.134 - Admin+ File Write Outside the Backup Directory via Path Traversal

Priority LOW 25

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied file name before using it to build a write path, allowing administrators to write files of permitted types to ar…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00383 Published 2026-09-04 Fixed in 0.9.134 CWE-22