CVE-2025-12654 Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation

The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary directory creation in all versions up to, and including, 0.9.120. This is due to the checkfilesystempermissions function not properly restricting the directories that can be created, or in...

CVE-2025-12654

creationtimestamp| type| source ---|---|--- 2025-04-04 13:30:21+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/29665 2025-04-05 18:03:01+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/29939 2025-04-05 23:00:06+00:00| published-proof-of-concept|...