WP
Vendor
wpvividplugins
23
CVEs
0
On KEV
0
New 30D
Products
WB9.8
WPvivid — Backup, Migration & Staging
wpvividplugins
16 CVEs0 on KEV0 new
WB6.1
WPvivid Backup for MainWP
wpvividplugins
3 CVEs0 on KEV0 new
MB9.1
Migration, Backup, Staging – WPvivid
wpvividplugins
2 CVEs0 on KEV0 new
MB8.8
Migration Backup Staging Wpvivd Backup And Migration
Wpvividplugins
1 CVEs0 on KEV0 new
WB9.8
WPvivid Backup and Migration
wpvividplugins
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-17555 | WB WPvivid — Backup, Migration & Staging wpvividplugins | 4.9 | Aug 1 | WPvivid <= 0.9.131 - Authenticated (Administrator+) SQL Injection via 'export_data' Parameter |
| CVE-2026-15283 | WB WPvivid Backup for MainWP wpvividplugins | 4.4 | Jul 10 | WPvivid Backup for MainWP <= 0.9.33 - Authenticated (Admin+) Stored Cross-Site Scripting |
| CVE-2025-12656 | WB WPvivid — Backup, Migration & Staging wpvividplugins | 3.8 | Jun 5 | Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletion |
| CVE-2026-1357 | WB WPvivid — Backup, Migration & Staging wpvividplugins | 9.8 | Feb 11 | Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload |
| CVE-2025-12654 | WB WPvivid — Backup, Migration & Staging wpvividplugins | 2.7 | Dec 21 | Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation |
| CVE-2025-5961 | WB WPvivid — Backup, Migration & Staging wpvividplugins | 7.2 | Jul 3 | Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload |
| CVE-2024-13869 | WB WPvivid — Backup, Migration & Staging wpvividplugins | 7.2 | Feb 22 | Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file |
| CVE-2024-56273 | WB WPvivid Backup and Migration wpvividplugins | 9.8 | Jan 7 | WordPress WPvivid Backup plugin <= 0.9.106 - Broken Access Control vulnerability |
| CVE-2024-10962 | WB WPvivid — Backup, Migration & Staging wpvividplugins | 8.8 | Nov 14 | Migration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection |
| CVE-2020-36842 | WB WPvivid — Backup, Migration & Staging wpvividplugins | 8.8 | Oct 16 | Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2020-36835 | WB WPvivid — Backup, Migration & Staging wpvividplugins | 6.5 | Oct 16 | Migration, Backup, Staging – WPvivid <= 0.9.35 - Sensitive Information Disclosure |
| CVE-2024-35664 | WB WPvivid Backup for MainWP wpvividplugins | 6.1 | Jun 4 | WordPress WPvivid Backup for MainWP plugin <= 0.9.32 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-3054 | WB WPvivid — Backup, Migration & Staging wpvividplugins | 7.2 | Apr 12 | WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization |
| CVE-2024-1383 | WB WPvivid Backup for MainWP wpvividplugins | 6.1 | Mar 13 | WPvivid Backup for MainWP <= 0.9.32 - Reflected Cross-Site Scripting |
| CVE-2024-1981 | MB Migration, Backup, Staging – WPvivid wpvividplugins | 9.1 | Feb 29 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to SQL Injection via the 'table_prefix' parameter in version 0.9.68 due to insufficient escaping on the… |
| CVE-2024-1982 | WB WPvivid — Backup, Migration & Staging wpvividplugins | 9.1 | Feb 29 | WPvivid Backup and Migration <= 0.9.68 - Missing Authorization |
| CVE-2023-4637 | WB WPvivid — Backup, Migration & Staging wpvividplugins | 5.3 | Feb 5 | WPvivid <= 0.9.94 - Missing Authorization |
| CVE-2023-5121 | WB WPvivid — Backup, Migration & Staging wpvividplugins | 4.8 | Oct 20 | Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Stored Cross-Site Scripting |
| CVE-2023-4274 | MB Migration, Backup, Staging – WPvivid wpvividplugins | 6.5 | Oct 20 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 0.9.89 |
| CVE-2023-5576 | WB WPvivid — Backup, Migration & Staging wpvividplugins | 9.3 | Oct 20 | Migration, Backup, Staging – WPvivid <= 0.9.91 - Google Drive Client Secret Exposure |
| CVE-2023-5120 | WB WPvivid — Backup, Migration & Staging wpvividplugins | 4.8 | Oct 20 | Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting |
| CVE-2022-2442 | WB WPvivid — Backup, Migration & Staging wpvividplugins | 7.2 | Sep 6 | Migration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization |