Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

WPvivid — Backup, Migration & Staging — Vulnerabilities & Security Advisories 21

All 21 CVE vulnerabilities found in WPvivid — Backup, Migration & Staging, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability disclosures for the WPvivid backup, migration, and staging plugin, specifically focusing on security weaknesses in its WordPress integration. It collects reported flaws ranging from cross-site scripting and unauthorized data access to remote code execution risks, covering all publicly known issues since the plugin's initial release through the most recent security advisories. Visitors can use this collection to track the evolution of security fixes from the vendor, analyze the prevalence of specific weakness classes like broken access control, and review the complete historical vulnerability profile of the product to assess its long-term security posture. By consolidating these records, the page serves as a technical reference for security professionals and site administrators who need to understand the specific threat landscape associated with this particular WordPress extension without navigating multiple disparate databases.

Vendor: wpvividplugins

CVE ID Title CVSS Severity Published
CVE-2026-82194 WPvivid Backup & Migration < 0.9.134 - Admin+ Arbitrary File Deletion via Path Traversal - - 2026-09-04
CVE-2026-82193 WPvivid Backup & Migration < 0.9.134 - Admin+ File Write Outside the Backup Directory via Path Traversal - - 2026-09-04
CVE-2026-82182 WPvivid Backup & Migration < 0.9.133 - Admin+ SQLi via Upload Cleaner Isolation - - 2026-09-02
CVE-2026-19722 WPvivid Backup & Migration < 0.9.133 - Admin+ Arbitrary File Write via Zip Slip in Backup Restore - - 2026-08-30
CVE-2026-19725 WPvivid Backup & Migration < 0.9.131 - Unauthenticated Path Traversal via send_to_site_connect - - 2026-08-16
CVE-2026-17555 WPvivid <= 0.9.131 - Authenticated (Administrator+) SQL Injection via 'export_data' Parameter CWE-89 4.9 Medium 2026-08-01
CVE-2025-12656 Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletion CWE-73 3.8 Low 2026-06-05
CVE-2026-1357 Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload CWE-434 9.8 Critical 2026-02-11
CVE-2025-12654 Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation CWE-73 2.7 Low 2025-12-21
CVE-2025-5961 Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload CWE-434 7.2 High 2025-07-03
CVE-2024-13869 Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file CWE-434 7.2 High 2025-02-22
CVE-2024-10962 Migration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection CWE-502 8.8 High 2024-11-14
CVE-2020-36842 Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload CWE-434 8.8 High 2024-10-16
CVE-2020-36835 Migration, Backup, Staging – WPvivid <= 0.9.35 - Sensitive Information Disclosure CWE-200 4.9 Medium 2024-10-16
CVE-2024-3054 WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization CWE-502 7.2 High 2024-04-12
CVE-2024-1982 WPvivid Backup and Migration <= 0.9.68 - Missing Authorization CWE-862 6.5 Medium 2024-02-29
CVE-2023-4637 WPvivid <= 0.9.94 - Missing Authorization CWE-862 4.3 Medium 2024-02-05
CVE-2023-5121 Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Stored Cross-Site Scripting CWE-79 4.4 Medium 2023-10-20
CVE-2023-5576 Migration, Backup, Staging – WPvivid <= 0.9.91 - Google Drive Client Secret Exposure CWE-200 8.0 High 2023-10-20
CVE-2023-5120 Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting CWE-79 4.4 Medium 2023-10-20
CVE-2022-2442 Migration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization CWE-502 7.2 High 2022-09-06

All 21 known CVE vulnerabilities affecting WPvivid — Backup, Migration & Staging with full Chinese analysis, references, and POCs where available.