Wwpvividplugins

Products

Exploited and recent CVEs

• CVE-2026-17555 Medium 4.9 WPvivid <= 0.9.131 - Authenticated (Administrator+) SQL Injection via 'export_data' Parameter 0.4%
• CVE-2026-15283 Medium 4.4 WPvivid Backup for MainWP <= 0.9.33 - Authenticated (Admin+) Stored Cross-Site Scripting 0.2%
• CVE-2025-12656 Low 3.8 Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletion 0.4%
• CVE-2026-1357 Critical 9.8 Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload 35.1%
• CVE-2025-12654 Low 2.7 Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation 0.4%
• CVE-2025-5961 High 7.2 Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload 55.5%
• CVE-2024-13869 High 7.2 Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file 2.3%
• CVE-2024-56273 Medium 4.3 WordPress WPvivid Backup plugin <= 0.9.106 - Broken Access Control vulnerability 0.4%
• CVE-2024-10962 High 8.8 Migration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection 0.7%
• CVE-2020-36842 High 8.8 Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload 1.2%
• CVE-2020-36835 Medium 4.9 Migration, Backup, Staging – WPvivid <= 0.9.35 - Sensitive Information Disclosure 0.5%
• CVE-2024-35664 High 7.1 WordPress WPvivid Backup for MainWP plugin <= 0.9.32 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-3054 High 7.2 WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization 41.5%
• CVE-2024-1383 Medium 6.1 WPvivid Backup for MainWP <= 0.9.32 - Reflected Cross-Site Scripting 0.6%
• CVE-2024-1981 Critical 9.8 The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to SQL Injection via the 'table_prefix' parameter in version 0.9.68 due to insufficient escaping on the user supplied parame 1.1%
• CVE-2024-1982 Medium 6.5 WPvivid Backup and Migration <= 0.9.68 - Missing Authorization 0.8%
• CVE-2023-4637 Medium 4.3 WPvivid <= 0.9.94 - Missing Authorization 0.6%
• CVE-2023-5121 Medium 4.4 Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.4%
• CVE-2023-4274 High 8.7 The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 0.9.89. This allows authenticated attackers with administrative pri 1.5%
• CVE-2023-5576 High 8.0 Migration, Backup, Staging – WPvivid <= 0.9.91 - Google Drive Client Secret Exposure 0.9%
• CVE-2023-5120 Medium 4.4 Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting 0.4%
• CVE-2022-2442 High 7.2 Migration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization 1.8%