WP
Vendor
Wpvivid
23
CVEs
0
On KEV
0
New 30D
Products
MB9.8
Migration, Backup, Staging
Wpvivid
20 CVEs0 on KEV0 new
WB6.1
Wpvivid Backup For Mainwp
Wpvivid
2 CVEs0 on KEV0 new
WB7.2
Wpvivid Backup & Migration
Wpvivid
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-5961 | MB Migration, Backup, Staging Wpvivid | 7.2 | Jul 3 | Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload |
| CVE-2024-13869 | WB Wpvivid Backup & Migration Wpvivid | 7.2 | Feb 22 | Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file |
| CVE-2024-56273 | MB Migration, Backup, Staging Wpvivid | 9.8 | Jan 7 | WordPress WPvivid Backup plugin <= 0.9.106 - Broken Access Control vulnerability |
| CVE-2024-10962 | MB Migration, Backup, Staging Wpvivid | 8.8 | Nov 14 | Migration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection |
| CVE-2020-36842 | MB Migration, Backup, Staging Wpvivid | 8.8 | Oct 16 | Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2020-36835 | MB Migration, Backup, Staging Wpvivid | 6.5 | Oct 16 | Migration, Backup, Staging – WPvivid <= 0.9.35 - Sensitive Information Disclosure |
| CVE-2024-7315 | MB Migration, Backup, Staging Wpvivid | 7.5 | Oct 2 | The Migration, Backup, Staging WordPress plugin before 0.9.106 does not use sufficient randomness in the filename that is created when generating a backup, which could be… |
| CVE-2024-35664 | WB Wpvivid Backup For Mainwp Wpvivid | 6.1 | Jun 4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpvividplugins WPvivid Backup for MainWP wpvivid-backup-mainwp allows… |
| CVE-2023-41243 | MB Migration, Backup, Staging Wpvivid | 8.8 | May 17 | Improper Privilege Management vulnerability in WPvivid Team WPvivid Backup and Migration allows Privilege Escalation.This issue affects WPvivid Backup and Migration: from n/a… |
| CVE-2024-3054 | MB Migration, Backup, Staging Wpvivid | 7.2 | Apr 12 | WPvivid Backup & Migration Plugin for WordPress is vulnerable to PHAR Deserialization in all versions up to, and including, 0.9.99 via deserialization of untrusted input at the… |
| CVE-2024-1383 | WB Wpvivid Backup For Mainwp Wpvivid | 6.1 | Mar 13 | The WPvivid Backup for MainWP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 0.9.32 due to… |
| CVE-2024-1982 | MB Migration, Backup, Staging Wpvivid | 9.1 | Feb 29 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the get_restore_progress() and restore()… |
| CVE-2024-1981 | MB Migration, Backup, Staging Wpvivid | 9.1 | Feb 29 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to SQL Injection via the 'table_prefix' parameter in version 0.9.68 due to insufficient escaping on the… |
| CVE-2023-4637 | MB Migration, Backup, Staging Wpvivid | 5.3 | Feb 5 | The WPvivid plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the restore() and get_restore_progress() function in versions up… |
| CVE-2023-5121 | MB Migration, Backup, Staging Wpvivid | 4.8 | Oct 20 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings (the backup path parameter) in versions up to, and… |
| CVE-2023-5576 | MB Migration, Backup, Staging Wpvivid | 9.3 | Oct 20 | The Migration, Backup, Staging - WPvivid plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 0.9.91 via Google Drive API secrets… |
| CVE-2023-5120 | MB Migration, Backup, Staging Wpvivid | 4.8 | Oct 20 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image file path parameter in versions up to, and including,… |
| CVE-2023-4274 | MB Migration, Backup, Staging Wpvivid | 6.5 | Oct 20 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 0.9.89 |
| CVE-2022-2863 | MB Migration, Backup, Staging Wpvivid | 4.9 | Sep 16 | The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the content of a file, allowing high privilege… |
| CVE-2022-2442 | MB Migration, Backup, Staging Wpvivid | 7.2 | Sep 6 | The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to deserialization of untrusted input via the 'path' parameter in versions up to, and including… |
| CVE-2022-27844 | MB Migration, Backup, Staging Wpvivid | 7.5 | Apr 11 | Arbitrary File Read vulnerability in WPvivid Team Migration, Backup, Staging – WPvivid (WordPress plugin) versions <= 0.9.70 |
| CVE-2022-0531 | MB Migration, Backup, Staging Wpvivid | 6.1 | Apr 11 | The Migration, Backup, Staging WordPress plugin before 0.9.70 does not sanitise and escape the sub_page parameter before outputting it back in the page, leading to a reflected… |
| CVE-2021-24994 | MB Migration, Backup, Staging Wpvivid | 6.1 | Feb 28 | The Migration, Backup, Staging WordPress plugin before 0.9.69 does not have authorisation when adding remote storages, and does not sanitise as well as escape a parameter from… |