Skip to content
OpenAdvisories

Archive

22 February 2025

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.2
    CVE-2024-13869 Public exploit

    Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file

    The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_files' function in all versions up to, and including, 0.9.112. This makes it possible f…