WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wpvivid-backuprestore
Published
2023-10-13
Title
Migration, Backup, Staging - WPvivid < 0.9.92 - Unauthenticated Sensitive Information Exposure
Slug
wpvivid-backuprestore
Published
2023-09-22
Title
Migration, Backup, Staging – WPvivid < 0.9.90 - Admin+ Stored XSS
Slug
wpvivid-backuprestore
Published
2023-09-22
Title
Migration, Backup, Staging – WPvivid < 0.9.90 - Admin+ Stored XSS
Slug
wpvivid-backuprestore
Published
2023-09-22
Title
Migration, Backup, Staging – WPvivid < 0.9.90 - Admin+ Arbitrary Directory Deletion via Path Traversal
Slug
wpvivid-backuprestore
Published
2023-09-12
Title
WPvivid Backup Plugin < 0.9.91 - Missing Authorization via 'start_staging' and 'get_staging_progress'
Slug
wpvivid-backuprestore
Published
2024-01-19
Title
WPvivid < 0.9.95 - Missing Authorization
Slug
wpvivid-backuprestore
Published
2024-02-28
Title
WPvivid Backup and Migration < 0.9.69 - Unauthenticated SQLi & DoS
Slug
wpvivid-backuprestore
Published
2024-04-11
Title
WPvivid Backup & Migration Plugin < 0.9.100 - Admin+ PHAR Deserialization
Slug
wpvivid-backuprestore
Published
2024-09-11
Title
Migration, Backup, Staging – WPvivid < 0.9.106 - Unauthenticated Sensitive Data Exposure
Slug
wpvivid-backuprestore
Published
2024-11-13
Title
Migration, Backup, Staging – WPvivid < 0.9.108 - Unauthenticated PHP Object Injection
Slug
wpvivid-backuprestore
Published
2025-01-03
Title
WPvivid Backup and Migration < 0.9.107 - Missing Authorization
Slug
wpvivid-backuprestore
Published
2025-02-21
Title
WPvivid < 0.9.113 - Admin+ Arbitrary File Upload
Slug
wpvivid-backuprestore
Published
2025-07-03
Title
WPvivid Backup & Migration < 0.9.117 - Admin+ Arbitrary File Upload
Slug
wpvivid-backuprestore
Published
2025-12-20
Title
WPvivid Backup & Migration < 0.9.121 - Admin+ Arbitrary Directory Creation
Slug
wpvivid-backuprestore
Published
2026-02-10
Title
Migration, Backup, Staging < 0.9.124 - Unauthenticated Arbitrary File Upload
Slug
wpvivid-backuprestore
Published
2026-06-05
Title
WPvivid Backup & Migration < 0.9.129 - Admin+ Arbitrary Directory Deletion
Slug
wpvn-username-changer
Published
2025-04-24
Title
WPVN <= 0.7.8 - Cross-Site Request Forgery
Slug
wpvr
Published
2023-01-12
Title
WP VR < 8.2.7 - Contributor+ Stored XSS
Slug
wpvr
Published
2023-02-14
Title
WP VR < 8.2.8 - Subscriber+ Settings Update
Slug
wpvr
Published
2023-03-22
Title
WP VR < 8.2.9 - Reflected XSS
Slug
wpvr
Published
2023-03-29
Title
WP VR < 8.3.0 - Subscriber+ Arbitrary Tour Update
Slug
wpvr
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wpvr
Published
2023-08-18
Title
WP VR < 8.3.5 - Reflected XSS
Slug
wpvr
Published
2023-12-14
Title
WP VR < 8.3.15 - Unauthenticated Plugin Downgrade leading to XSS
Slug
wpvr
Published
2024-10-15
Title
WP VR < 8.5.5 - Missing Authorization