MB
Product
Migration, Backup, Staging
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 8Medium 8Low 0
Watch
Add Migration, Backup, Staging to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-56273 | 9.8 | Jan 7 | WordPress WPvivid Backup plugin <= 0.9.106 - Broken Access Control vulnerability Affected: before 0.9.107 |
| CVE-2023-5576 | 9.3 | Oct 20 | The Migration, Backup, Staging - WPvivid plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 0.9.91 via Google Drive API secrets… Affected: through 0.9.91 |
| CVE-2024-1982 | 9.1 | Feb 29 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the get_restore_progress() and restore()… Affected: through 0.9.68 |
| CVE-2024-1981 | 9.1 | Feb 29 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to SQL Injection via the 'table_prefix' parameter in version 0.9.68 due to insufficient escaping on the… Affected: through 0.9.68 |
| CVE-2024-10962 | 8.8 | Nov 14 | Migration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection Affected: before 0.9.108 |
| CVE-2020-36842 | 8.8 | Oct 16 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the wpvivid_upload_import_files and… Affected: through 0.9.35 |
| CVE-2023-41243 | 8.8 | May 17 | Improper Privilege Management vulnerability in WPvivid Team WPvivid Backup and Migration allows Privilege Escalation.This issue affects WPvivid Backup and Migration: from n/a… Affected: before 0.9.91 |
| CVE-2024-7315 | 7.5 | Oct 2 | The Migration, Backup, Staging WordPress plugin before 0.9.106 does not use sufficient randomness in the filename that is created when generating a backup, which could be… Affected: before 0.9.106 |
| CVE-2022-27844 | 7.5 | Apr 11 | Arbitrary File Read vulnerability in WPvivid Team Migration, Backup, Staging – WPvivid (WordPress plugin) versions <= 0.9.70 Affected: before 0.9.71 |
| CVE-2025-5961 | 7.2 | Jul 3 | Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload Affected: before 0.9.117 |
| CVE-2024-3054 | 7.2 | Apr 12 | WPvivid Backup & Migration Plugin for WordPress is vulnerable to PHAR Deserialization in all versions up to, and including, 0.9.99 via deserialization of untrusted input at the… Affected: before 0.9.100 |
| CVE-2022-2442 | 7.2 | Sep 6 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to deserialization of untrusted input via the 'path' parameter in versions up to, and including… Affected: through 0.9.74 |
| CVE-2020-36835 | 6.5 | Oct 16 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to sensitive information disclosure of a WordPress site's database due to missing capability checks on… Affected: before 0.9.36 |
| CVE-2023-4274 | 6.5 | Oct 20 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 0.9.89 Affected: before 0.9.90 |
| CVE-2022-0531 | 6.1 | Apr 11 | The Migration, Backup, Staging WordPress plugin before 0.9.70 does not sanitise and escape the sub_page parameter before outputting it back in the page, leading to a reflected… Affected: before 0.9.70 |
| CVE-2021-24994 | 6.1 | Feb 28 | The Migration, Backup, Staging WordPress plugin before 0.9.69 does not have authorisation when adding remote storages, and does not sanitise as well as escape a parameter from… Affected: before 0.9.69 |
| CVE-2023-4637 | 5.3 | Feb 5 | The WPvivid plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the restore() and get_restore_progress() function in versions up… Affected: through 0.9.94 |
| CVE-2022-2863 | 4.9 | Sep 16 | The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the content of a file, allowing high privilege… Affected: before 0.9.76 |
| CVE-2023-5121 | 4.8 | Oct 20 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings (the backup path parameter) in versions up to, and… Affected: through 0.9.89 |
| CVE-2023-5120 | 4.8 | Oct 20 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image file path parameter in versions up to, and including,… Affected: through 0.9.89 |
Showing 20