Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-1357— Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload

Quick assessment

Affected
wpvividplugins WPvivid — Backup, Migration & Staging
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台具有在基于PHP和MySQL的服务器上架设个人博客网站的功能。WordPress plugin是一个应用插件。 WordPress plugin Migration, Backup, Staging – WPvivid Backup & Migration 0.9.123及之前版本存在代码问题漏洞，该漏洞源于RSA解密过程错误处理不当以及写入上传文件时缺少路径

CVSS 9.8 · Critical EPSS 33.33% · P98

Public Exploits 1

Nuclei · 1 CVE-2026-1357.yaml [template]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-1357

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload
Source: CVE Program / CVE List V5
Vulnerability Description
The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. This is due to improper error handling in the RSA decryption process combined with a lack of path sanitization when writing uploaded files. When the plugin fails to decrypt a session key using openssl_private_decrypt(), it does not terminate execution and instead passes the boolean false value to the phpseclib library's AES cipher initialization. The library treats this false value as a string of null bytes, allowing an attacker to encrypt a malicious payload using a predictable null-byte key. Additionally, the plugin accepts filenames from the decrypted payload without sanitization, enabling directory traversal to escape the protected backup directory. This makes it possible for unauthenticated attackers to upload arbitrary PHP files to publicly accessible directories and achieve Remote Code Execution via the wpvivid_action=send_to_site parameter.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
危险类型文件的不加限制上传
Source: CVE Program / CVE List V5
Vulnerability Title
WordPress plugin Migration, Backup, Staging – WPvivid Backup & Migration 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台具有在基于PHP和MySQL的服务器上架设个人博客网站的功能。WordPress plugin是一个应用插件。 WordPress plugin Migration, Backup, Staging – WPvivid Backup & Migration 0.9.123及之前版本存在代码问题漏洞，该漏洞源于RSA解密过程错误处理不当以及写入上传文件时缺少路径
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
wpvividplugins Migration, Backup, Staging – WPvivid Backup & Migration * ~ 0.9.123 -

II. Public POCs for CVE-2026-1357

# POC Description Source Link Shenlong Link
1 Exploit CVE-2026-1357 https://github.com/itsismarcos/Exploit-CVE-2026-1357 POC Details
2 POC-CVE-2026-1357 https://github.com/LucasM0ntes/POC-CVE-2026-1357 POC Details
3 CVE-2026-1357 — WPvivid Backup & Migration ≤ 0.9.123 Unauthenticated RCE PoC (Cryptographic Fail-Open + Path Traversal) https://github.com/halilkirazkaya/CVE-2026-1357 POC Details
4 None https://github.com/cybertechajju/CVE-2026-1357-POC POC Details
5 WPvivid Backup & Migration plugin for WordPress <= 0.9.123 contains an unauthenticated arbitrary file upload vulnerability caused by improper error handling in RSA decryption and lack of path sanitization, letting unauthenticated attackers upload arbitrary PHP files and achieve remote code execution via wpvivid_action=send_to_site parameter. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1357.yaml POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-1357

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-1357 (3)

IV. Related Vulnerabilities

Same product: WPvivid — Backup, Migration & Staging
Same vendor: wpvividplugins
Same weakness: CWE-434

V. Comments for CVE-2026-1357

No comments yet

Leave a comment