6.5
Moyenne
CVE-2024-1982 The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to unauthorized access due to a missing…
Description
The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the get_restore_progress() and restore() functions in all versions up to, and including, 0.9.68. This makes it possible for unauthenticated attackers to exploit a SQL injection vulnerability or trigger a DoS.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| migration\,_backup\,_staging 0.9 | premières → 0.9.68 | Pas de correctif indiqué |
| Migration, Backup, Staging – WPvivid 0.9 | premières → 0.9.68 | Pas de correctif indiqué |
| WPvivid — Backup, Migration & Staging 0.9 | premières → 0.9.68 | Pas de correctif indiqué |
Autres CVE de migration\,_backup\,_staging
Les 4 CVE de migration\,_backup\,_staging →
CVE-2020-36842
The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing…
8.8
Élevée
CVE-2023-41243
Improper Privilege Management vulnerability in WPvivid Team WPvivid Backup and Migration allows Privilege…
8.8
Élevée
CVE-2024-1981
The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to SQL Injection via the 'table_prefix'…
9.8
Critique