Skip to content
Noroxi

WPvivid — Backup, Migration & Staging

wpvivid-backuprestore · plugin

Known security vulnerabilities for WPvivid — Backup, Migration & Staging. Find out in seconds which version runs on your site with WP Lens.

19 known vulnerabilities

3 critical · 4 with public exploit code · latest Aug 1, 2026

Vulnerabilities

  • CVE-2026-1357

    Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload

    Critical 9.8

  • CVE-2024-56273

    WordPress WPvivid Backup plugin <= 0.9.106 - Broken Access Control vulnerability

    Critical 9.8

  • CVE-2023-5576

    Migration, Backup, Staging – WPvivid <= 0.9.91 - Google Drive Client Secret Exposure

    Critical 9.3

  • CVE-2024-10962

    Migration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection

    High 8.8

  • CVE-2020-36842

    Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload

    High 8.8

  • CVE-2023-41243

    WordPress WPvivid Backup Plugin plugin <= 0.9.90 - Privilege Escalation on Staging Environment vulnerability

    High 8.8

  • CVE-2022-27844

    WordPress WPvivid plugin <= 0.9.70 - Arbitrary File Read vulnerability

    High 7.5

  • CVE-2025-5961

    Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload

    High 7.2

  • CVE-2024-13869

    Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file

    High 7.2

  • CVE-2024-3054

    WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization

    High 7.2

  • CVE-2022-2442

    Migration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization

    High 7.2

  • CVE-2020-36835→ 0.9.36

    Migration, Backup, Staging – WPvivid <= 0.9.35 - Sensitive Information Disclosure

    Medium 6.5

  • CVE-2023-4274

    The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 0.9.89.

    Medium 6.5

  • CVE-2023-4637

    WPvivid <= 0.9.94 - Missing Authorization

    Medium 5.3

  • CVE-2026-17555

    WPvivid <= 0.9.131 - Authenticated (Administrator+) SQL Injection via 'export_data' Parameter

    Medium 4.9

  • CVE-2023-5121

    Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Stored Cross-Site Scripting

    Medium 4.8

  • CVE-2023-5120

    Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting

    Medium 4.8

  • CVE-2025-12656

    Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletion

    Low 3.8

  • CVE-2025-12654

    Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation

    Low 2.7

← Back to directory