Skip to content
OpenAdvisories

Vendor

wpvividplugins

22 known vulnerabilities.

Products

WPvivid — Backup, Migration & Staging 16 WPvivid Backup for MainWP 3 Migration, Backup, Staging – WPvivid 2 WPvivid Backup and Migration 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-1357 Public exploit EPSS 39%

    Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload

    The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. This is due to improper error handling in the RSA decryption process combined with…

    wpvividplugins WPvivid — Backup, Migration & Staging Web / CMS
  • High 7.2
    CVE-2025-5961 Public exploit EPSS 55%

    Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload

    The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpvivid_upload_import_files' function in all versions up to, and including, 0.9.116. This make…

    wpvividplugins WPvivid — Backup, Migration & Staging Web / CMS
  • High 7.2
    CVE-2024-13869 Public exploit

    Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file

    The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_files' function in all versions up to, and including, 0.9.112. This makes it possible f…

    wpvividplugins WPvivid — Backup, Migration & Staging Web / CMS
  • High 8.8
    CVE-2020-36842 Public exploit

    Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload

    The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the wpvivid_upload_import_files and wpvivid_upload_files AJAX actions that allows low-level authenticated attackers to u…

    wpvividplugins WPvivid — Backup, Migration & Staging Web / CMS