Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: WPvivid — Backup, Migration & Staging 0.9.137 Clear all filters
TI-2026-84960 CVE-2026-115243 · GHSA-ffwc-7qpf-45gq

Arbitrary file upload in WPvivid Backup & Migration plugin

Priority LOW 31

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not validate the extension of the file it actually stores when handling an import upload: it checks the extension of a separate request field…

CVSS 3.1MEDIUM 6.7 Network High privileges No interaction EPSS 0.00309 Published 2026-11-04 Fixed in 0.9.137 CWE-434
TI-2026-84959 CVE-2026-115242 · GHSA-799w-j885-wg7g

Path traversal in WPvivid staging writes files outside WordPress

Priority LOW 25

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not sanitize the staging destination folder supplied to its staging-start handler, applying only a generic text filter while the sibling writ…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00284 Published 2026-11-04 Fixed in 0.9.137 CWE-22
TI-2026-84958 CVE-2026-115241 · GHSA-xj7v-7phj-c92j

WPvivid plugin lets administrators drop any database table

Priority LOW 29

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not verify that a submitted snapshot identifier names a snapshot it actually created before using it as a database table-name prefix, so an a…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00287 Published 2026-11-04 Fixed in 0.9.137 CWE-284