Medium · 4.3 CVE-2024-56273 EUVD-2024-53070GHSA-3rg4-57j5-xx9q

WordPress WPvivid Backup plugin <= 0.9.106 - Broken Access Control vulnerability

Published Jan 7, 2025 · Updated May 11, 2026 · Assigned by Patchstack

Vendor: wpvividplugins Product: WPvivid Backup and Migration

Description

Missing Authorization vulnerability in wpvividplugins WPvivid Backup and Migration wpvivid-backuprestore allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPvivid Backup and Migration: from n/a through <= 0.9.106.

Affected products

Vendor	Product	Affected	Fixed
wpvividplugins	WPvivid Backup and Migration	≤ 0.9.106	—

References

https://patchstack.com/database/Wordpress/Plugin/wpvivid-backuprestore/vulnerability/wordpress-wpvivid-backup-plugin-0-9-106-broken-access-control-vulnerability?_s_id=cve vdb-entry