CVE-2026-19725

The CVE concerns the WPvivid — Backup, Migration & Staging WordPress plugin (versions before 0.9.131). The issue stems from failing to sanitize a value taken from an unauthenticated request when building a log file path. As a result, an attacker who possesses a site-to-site transfer key can cause...