Migration, Backup, Staging vulnerabilities | LiveThreat CVE Feed

Product

Migration, Backup, Staging

by Wpvivid · last CVE Jul 3, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities20 In the news0 Timeline

Severity mix

Critical 4High 8Medium 8Low 0

Severity

All severities20 Critical4 High8 Medium8 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Migration, Backup, Staging to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-56273	9.8	0%	Jan 7	WordPress WPvivid Backup plugin <= 0.9.106 - Broken Access Control vulnerability Affected: before 0.9.107
CVE-2023-5576	9.3	1%	Oct 20	Migration, Backup, Staging – WPvivid <= 0.9.91 - Google Drive Client Secret Exposure Affected: through 0.9.91
CVE-2024-1981	9.1	1%	Feb 29	The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to SQL Injection via the 'table_prefix' parameter in version 0.9.68 due to insufficient escaping on the… Affected: through 0.9.68
CVE-2024-1982	9.1	1%	Feb 29	WPvivid Backup and Migration <= 0.9.68 - Missing Authorization Affected: through 0.9.68
CVE-2024-10962	8.8	1%	Nov 14	Migration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection Affected: before 0.9.108
CVE-2020-36842	8.8	1%	Oct 16	Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload Affected: through 0.9.35
CVE-2023-41243	8.8	1%	May 17	WordPress WPvivid Backup Plugin plugin <= 0.9.90 - Privilege Escalation on Staging Environment vulnerability Affected: before 0.9.91
CVE-2024-7315	7.5	1%	Oct 2	Migration, Backup, Staging – WPvivid < 0.9.106 - Unauthenticated Sensitive Data Exposure Affected: before 0.9.106
CVE-2022-27844	7.5	2%	Apr 11	WordPress WPvivid plugin <= 0.9.70 - Arbitrary File Read vulnerability Affected: before 0.9.71
CVE-2025-5961	7.2	55%	Jul 3	Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload Affected: before 0.9.117
CVE-2024-3054	7.2	42%	Apr 12	WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization Affected: before 0.9.100
CVE-2022-2442	7.2	2%	Sep 6	Migration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization Affected: through 0.9.74
CVE-2020-36835	6.5	1%	Oct 16	Migration, Backup, Staging – WPvivid <= 0.9.35 - Sensitive Information Disclosure Affected: before 0.9.36
CVE-2023-4274	6.5	2%	Oct 20	The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 0.9.89 Affected: before 0.9.90
CVE-2022-0531	6.1	1%	Apr 11	WPvivid Backup and Migration Plugin < 0.9.70 - Reflected Cross-Site Scripting Affected: before 0.9.70
CVE-2021-24994	6.1	1%	Feb 28	WPvivid Backup and Migration Plugin < 0.9.69 - Unauthenticated Stored Cross-Site Scripting Affected: before 0.9.69
CVE-2023-4637	5.3	1%	Feb 5	WPvivid <= 0.9.94 - Missing Authorization Affected: through 0.9.94
CVE-2022-2863	4.9	25%	Sep 16	WPvivid Backup < 0.9.76 - Admin+ Arbitrary File Read Affected: before 0.9.76
CVE-2023-5121	4.8	0%	Oct 20	Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Stored Cross-Site Scripting Affected: through 0.9.89
CVE-2023-5120	4.8	0%	Oct 20	Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting Affected: through 0.9.89