WPvivid — Backup, Migration & Staging vulnerabilities
We track 1 vulnerability in WPvivid — Backup, Migration & Staging products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 16, 2026.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest WPvivid — Backup, Migration & Staging vulnerabilities
- 9.1 Critical severity
WPvivid — Backup, Migration & Staging: Improper Limitation of a Pathname to a Restricted Directory
The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 does not sanitise a value taken from an unauthenticated request before using it to build a log file path, allowing an attacker holding a site to site transfer key to create a log file in