İçeriğe atla
Noroxi

WPvivid — Backup, Migration & Staging

wpvivid-backuprestore · eklenti

WPvivid — Backup, Migration & Staging için bilinen güvenlik açıkları. Sitenizde bu bileşenin hangi sürümünün çalıştığını WP Lens ile saniyede öğrenin.

19 bilinen açık

3 kritik · 4 kayıt için istismar kodu yayımlanmış · son kayıt 1 Ağu 2026

Güvenlik açıkları

  • CVE-2026-1357

    Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload

    Kritik 9.8
  • CVE-2024-56273

    WordPress WPvivid Backup plugin <= 0.9.106 - Broken Access Control vulnerability

    Kritik 9.8
  • CVE-2023-5576

    Migration, Backup, Staging – WPvivid <= 0.9.91 - Google Drive Client Secret Exposure

    Kritik 9.3
  • CVE-2024-10962

    Migration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection

    Yüksek 8.8
  • CVE-2020-36842

    Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload

    Yüksek 8.8
  • CVE-2023-41243

    WordPress WPvivid Backup Plugin plugin <= 0.9.90 - Privilege Escalation on Staging Environment vulnerability

    Yüksek 8.8
  • CVE-2022-27844

    WordPress WPvivid plugin <= 0.9.70 - Arbitrary File Read vulnerability

    Yüksek 7.5
  • CVE-2025-5961

    Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload

    Yüksek 7.2
  • CVE-2024-13869

    Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file

    Yüksek 7.2
  • CVE-2024-3054

    WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization

    Yüksek 7.2
  • CVE-2022-2442

    Migration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization

    Yüksek 7.2
  • CVE-2020-36835→ 0.9.36

    Migration, Backup, Staging – WPvivid <= 0.9.35 - Sensitive Information Disclosure

    Orta 6.5
  • CVE-2023-4274

    The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 0.9.89.

    Orta 6.5
  • CVE-2023-4637

    WPvivid <= 0.9.94 - Missing Authorization

    Orta 5.3
  • CVE-2026-17555

    WPvivid <= 0.9.131 - Authenticated (Administrator+) SQL Injection via 'export_data' Parameter

    Orta 4.9
  • CVE-2023-5121

    Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Stored Cross-Site Scripting

    Orta 4.8
  • CVE-2023-5120

    Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting

    Orta 4.8
  • CVE-2025-12656

    Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletion

    Düşük 3.8
  • CVE-2025-12654

    Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation

    Düşük 2.7

← Dizine dön