4.3
Medium
CVE-2023-4637 The WPvivid plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the…
Description
The WPvivid plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the restore() and get_restore_progress() function in versions up to, and including, 0.9.94. This makes it possible for unauthenticated attackers to invoke these functions and obtain full file paths if they have access to a back-up ID.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Migration, Backup, Staging – WPvivid 0.9 | earliest → 0.9.94 | No fix stated |
| WPvivid — Backup, Migration & Staging 0.9 | earliest → 0.9.94 | No fix stated |
Other CVEs of Migration, Backup, Staging – WPvivid
The 11 CVEs of Migration, Backup, Staging – WPvivid →
CVE-2020-36842
The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing…
8.8
High
CVE-2020-36835
The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to sensitive information disclosure of a…
4.9
Medium
CVE-2024-3054
WPvivid Backup & Migration Plugin for WordPress is vulnerable to PHAR Deserialization in all versions up to, and…
7.2
High
CVE-2024-1981
The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to SQL Injection via the 'table_prefix'…
9.8
Critical