8.8
Élevée
CVE-2020-36842 The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing…
Description
The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the wpvivid_upload_import_files and wpvivid_upload_files AJAX actions that allows low-level authenticated attackers to upload zip files that can be subsequently extracted. This affects versions up to, and including 0.9.35.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Migration, Backup, Staging – WPvivid 0.9 | premières → 0.9.35 | Pas de correctif indiqué |
| migration\,_backup\,_staging 0.9 | premières → 0.9.35 | Pas de correctif indiqué |
| WPvivid — Backup, Migration & Staging 0.9 | premières → 0.9.35 | Pas de correctif indiqué |
Autres CVE de Migration, Backup, Staging – WPvivid
Les 11 CVE de Migration, Backup, Staging – WPvivid →
CVE-2020-36835
The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to sensitive information disclosure of a…
4.9
Moyenne
CVE-2024-3054
WPvivid Backup & Migration Plugin for WordPress is vulnerable to PHAR Deserialization in all versions up to, and…
7.2
Élevée
CVE-2024-1981
The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to SQL Injection via the 'table_prefix'…
9.8
Critique
CVE-2024-1982
The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to unauthorized access due to a missing…
6.5
Moyenne