WB
Product
WPvivid — Backup, Migration & Staging
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 5Low 2
Watch
Add WPvivid — Backup, Migration & Staging to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-1357 | 9.8 | Feb 11 | Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload Affected: through 0.9.123 |
| CVE-2023-5576 | 9.3 | Oct 20 | Migration, Backup, Staging – WPvivid <= 0.9.91 - Google Drive Client Secret Exposure Affected: through 0.9.91 |
| CVE-2024-1982 | 9.1 | Feb 29 | WPvivid Backup and Migration <= 0.9.68 - Missing Authorization Affected: through 0.9.68 |
| CVE-2024-10962 | 8.8 | Nov 14 | Migration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection Affected: through 0.9.107 |
| CVE-2020-36842 | 8.8 | Oct 16 | Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload Affected: through 0.9.35 |
| CVE-2025-5961 | 7.2 | Jul 3 | Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload Affected: through 0.9.116 |
| CVE-2024-13869 | 7.2 | Feb 22 | Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file Affected: through 0.9.112 |
| CVE-2024-3054 | 7.2 | Apr 12 | WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization Affected: through 0.9.99 |
| CVE-2022-2442 | 7.2 | Sep 6 | Migration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization Affected: through 0.9.74 |
| CVE-2020-36835 | 6.5 | Oct 16 | Migration, Backup, Staging – WPvivid <= 0.9.35 - Sensitive Information Disclosure Affected: before 0.9.36 |
| CVE-2023-4637 | 5.3 | Feb 5 | WPvivid <= 0.9.94 - Missing Authorization Affected: through 0.9.94 |
| CVE-2026-17555 | 4.9 | Aug 1 | WPvivid <= 0.9.131 - Authenticated (Administrator+) SQL Injection via 'export_data' Parameter Affected: through 0.9.131 |
| CVE-2023-5121 | 4.8 | Oct 20 | Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Stored Cross-Site Scripting Affected: through 0.9.89 |
| CVE-2023-5120 | 4.8 | Oct 20 | Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting Affected: through 0.9.89 |
| CVE-2025-12656 | 3.8 | Jun 5 | Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletion Affected: through 0.9.128 |
| CVE-2025-12654 | 2.7 | Dec 21 | Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation Affected: through 0.9.120 |
Showing 16