WPvivid Team vulnerabilities

Products

• migration backup staging 1
• Migration, Backup, Staging – WPvivid (WordPress plugin) 1
• WPvivid Backup and Migration 1
• wpvivid backup for mainwp 1

Latest WPvivid Team CVEs

Newest publication first

1. CVE-2024-7315 Migration, Backup, Staging – WPvivid < 0.9.106 - Unauthenticated Sensitive Data Exposure

   Published 2024-10-02

   High·CVSS 7.5 EPSS 0.58%

   The Migration, Backup, Staging WordPress plugin before 0.9.106 does not use sufficient randomness in the filename that is created when generating a backup, which could be bruteforced by attackers to leak sensitive information about said backups.

2. CVE-2024-35664 WordPress WPvivid Backup for MainWP plugin <= 0.9.32 - Reflected Cross Site Scripting (XSS) vulnerability

   Published 2024-06-04

   Medium·CVSS 6.1 EPSS 0.26%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpvividplugins WPvivid Backup for MainWP wpvivid-backup-mainwp allows Reflected XSS.This issue affects WPvivid Backup for MainWP: from n/a through <= 0.9.32.

3. CVE-2023-41243 WordPress WPvivid Backup Plugin plugin <= 0.9.90 - Privilege Escalation on Staging Environment vulnerability

   Published 2024-05-17

   High·CVSS 8.8 EPSS 0.71%

   Improper Privilege Management vulnerability in WPvivid Team WPvivid Backup and Migration allows Privilege Escalation.This issue affects WPvivid Backup and Migration: from n/a through 0.9.90.

4. CVE-2022-27844 WordPress WPvivid plugin <= 0.9.70 - Arbitrary File Read vulnerability

   Published 2022-04-11

   High·CVSS 7.5 EPSS 1.5%

   Arbitrary File Read vulnerability in WPvivid Team Migration, Backup, Staging – WPvivid (WordPress plugin) versions <= 0.9.70

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.