Plugin icon

WPvivid — Backup, Migration & Staging

wpvivid-backuprestore

Vulnerabilities:

23

Last Updated:

March 25, 2026

Active Installs:

900000

Published
Title
Fixed in
CVSS
Published
2026-02-10
Title
Migration, Backup, Staging < 0.9.124 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 0.9.124
CVSS
9.8 (critical)
Published
2025-12-20
Title
WPvivid Backup & Migration < 0.9.121 - Admin+ Arbitrary Directory Creation
Fixed in
Fixed in 0.9.121
CVSS
2.7 (low)
Published
2025-07-03
Title
WPvivid Backup & Migration < 0.9.117 - Admin+ Arbitrary File Upload
Fixed in
Fixed in 0.9.117
CVSS
6.6 (medium)
Published
2025-02-21
Title
WPvivid < 0.9.113 - Admin+ Arbitrary File Upload
Fixed in
Fixed in 0.9.113
CVSS
7.2 (high)
Published
2025-01-03
Title
WPvivid Backup and Migration < 0.9.107 - Missing Authorization
Fixed in
Fixed in 0.9.107
CVSS
5.3 (medium)
Published
2024-11-13
Title
Migration, Backup, Staging – WPvivid < 0.9.108 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 0.9.108
CVSS
8.8 (high)
Published
2024-09-11
Title
Migration, Backup, Staging – WPvivid < 0.9.106 - Unauthenticated Sensitive Data Exposure
Fixed in
Fixed in 0.9.106
CVSS
7.0 (high)
Published
2024-04-11
Title
WPvivid Backup & Migration Plugin < 0.9.100 - Admin+ PHAR Deserialization
Fixed in
Fixed in 0.9.100
CVSS
7.2 (high)
Published
2024-02-28
Title
WPvivid Backup and Migration < 0.9.69 - Unauthenticated SQLi & DoS
Fixed in
Fixed in 0.9.69
CVSS
7.5 (high)
Published
2024-01-19
Title
WPvivid < 0.9.95 - Missing Authorization
Fixed in
Fixed in 0.9.95
CVSS
4.3 (medium)
Published
2023-10-13
Title
Migration, Backup, Staging - WPvivid < 0.9.92 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 0.9.92
CVSS
8.0 (high)
Published
2023-09-22
Title
Migration, Backup, Staging – WPvivid < 0.9.90 - Admin+ Arbitrary Directory Deletion via Path Traversal
Fixed in
Fixed in 0.9.90
CVSS
8.7 (high)
Published
2023-09-22
Title
Migration, Backup, Staging – WPvivid < 0.9.90 - Admin+ Stored XSS
Fixed in
Fixed in 0.9.90
CVSS
4.4 (medium)
Published
2023-09-22
Title
Migration, Backup, Staging – WPvivid < 0.9.90 - Admin+ Stored XSS
Fixed in
Fixed in 0.9.90
CVSS
4.4 (medium)
Published
2023-09-12
Title
WPvivid Backup Plugin < 0.9.91 - Missing Authorization via 'start_staging' and 'get_staging_progress'
Fixed in
Fixed in 0.9.91
CVSS
8.3 (high)
Published
2022-08-29
Title
WPvivid Backup 0.9.76 - Admin+ Arbitrary File Deletion
Fixed in
Fixed in 0.9.77
CVSS
6.8 (medium)
Published
2022-08-22
Title
WPvivid Backup < 0.9.76 - Admin+ Arbitrary File Read
Fixed in
Fixed in 0.9.76
CVSS
4.1 (medium)
Published
2022-08-17
Title
WPvivid Backup < 0.9.75 - Admin+ PHAR Deserialization
Fixed in
Fixed in 0.9.75
CVSS
4.7 (medium)
Published
2022-04-12
Title
WPvivid Backup and Migration Plugin < 0.9.71 - Admin+ Arbitrary File Download
Fixed in
Fixed in 0.9.71
CVSS
2.7 (low)
Published
2022-03-21
Title
WPvivid Backup and Migration Plugin < 0.9.70 - Reflected Cross-Site Scripting
Fixed in
Fixed in 0.9.70
CVSS
6.1 (medium)
Published
2022-01-31
Title
WPvivid Backup and Migration Plugin < 0.9.69 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 0.9.69
CVSS
9.6 (critical)
Published
2021-08-09
Title
WPvivid Backup < 0.9.56 - Reflected Cross-Site Scripting
Fixed in
Fixed in 0.9.56
CVSS
7.1 (high)
Published
2020-03-23
Title
WPvivid Backup < 0.9.36 - Missing Authorization Leading To Database Leak
Fixed in
Fixed in 0.9.36
CVSS
n/a