WPvivid Backup and Migration
wpvividplugins
Developer
0.9.124
Latest version
900,000
Installations
No date
Last updated
Vulnerability history
0 present
23 fixed
8 Mitigation rules
- Unauthenticated Arbitrary File Upload vulnerability<= 0.9.1235 days ago
- Authenticated (Admin+) Arbitrary Directory Creation vulnerability<= 0.9.120Dec 31, 2025
- Authenticated (Administrator+) Arbitrary File Upload vulnerability<= 0.9.116Jul 3, 2025
- Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file vulnerability<= 0.9.112Feb 22, 2025
- Broken Access Control vulnerability<= 0.9.106Jan 3, 2025
- Unauthenticated PHP Object Injection vulnerability<= 0.9.107Nov 14, 2024
- Unauthenticated Sensitive Data Exposure vulnerability< 0.9.106Sep 12, 2024
- Authenticated (Admin+) PHAR Deserialization vulnerability<= 0.9.99Apr 15, 2024
- Missing Authorization vulnerability<= 0.9.94Jan 22, 2024
- Missing Authorization vulnerability<= 0.9.68Jan 8, 2024
- Unauthenticated SQL Injection vulnerability<= 0.9.68Jan 8, 2024
- Google Drive Client Secret Exposure vulnerability<= 0.9.91Oct 16, 2023
- Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal vulnerability<= 0.9.89Sep 25, 2023
- Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability<= 0.9.89Sep 25, 2023
- Authenticated(Administrator+) Stored Cross-Site Scripting vulnerability<= 0.9.90Sep 13, 2023
- Privilege Escalation on Staging Environment vulnerability<= 0.9.90Sep 13, 2023
- Authenticated Arbitrary File Deletion vulnerability0.9.76Aug 29, 2022
- Authenticated PHAR Deserialization vulnerability<= 0.9.74Aug 18, 2022
- Arbitrary File Read vulnerability<= 0.9.70Apr 7, 2022
- Reflected Cross-Site Scripting (XSS) vulnerability<= 0.9.69Mar 21, 2022
- Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability<= 0.9.68Jan 31, 2022
- SQL Injection (SQLi) vulnerability<= 0.9.52Apr 26, 2021
- Missing Authorization vulnerability leading to Database Leak<= 0.9.35Feb 28, 2020