Description
The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not sanitise a user supplied list of identifiers before using it in a SQL query, allowing administrators to perform SQL injection attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WPvivid — Backup, Migration & Staging | < 0.9.133 | 0.9.133 |
References
- https://wpscan.com/vulnerability/79e58b77-6da8-4569-8ed3-a1ff5ced0991/ exploit vdb-entry technical-description