WordPress Plugin Vulnerabilities
WPvivid Backup and Migration < 0.9.69 - Unauthenticated SQLi & DoS
Description
The plugin is vulnerable to unauthorized access due to a missing capability check on the get_restore_progress() and restore() functions, allowing unauthenticated attackers to exploit a SQL injection vulnerability or trigger a DoS.
Affects Plugins
Fixed in 0.9.69 References
Classification
Type
NO AUTHORISATION
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Denis Werner
Verified
No
WPVDB ID
Timeline
Publicly Published
2024-02-28 (about 2 years ago)
Added
2024-02-29 (about 2 years ago)
Last Updated
2024-02-29 (about 2 years ago)
WPScan 