CVE-2026-1357

CVE-2026-1357 — WPvivid Backup & Migration ≤ 0.9.123 Upload Arbitrario di File Non Autenticato → RCE PoC per CVE-2026-1357 CVSS 9.8 Critico, CWE-434: un upload arbitrario di file non autenticato nel plugin WPvivid Backup & Migration per WordPress che porta all'esecuzione remota di codice. Corrett...

WordPress WPvivid Backup <0.9.76 - Local File Inclusion

WordPress WPvivid Backup version 0.9.76 is vulnerable to local file inclusion because the plugin does not sanitize and validate a parameter before using it to read the content of a file, allowing high privilege users to read any file from the web server. id: CVE-2022-2863 info: name: WordPress...

WordPress WPvivid Backup & Migration Plugin <= 0.9.116 - Authenticated Arbitrary File Upload

The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpvividuploadimportfiles' function in all versions up to, and including, 0.9.116. id: CVE-2025-5961 info: name: WordPress WPvivid...

CVE-2020-36842

CVE-2020-36842 CVE-2020-36842 - Vulnerabilità di Upload Arbitrario di File del Plugin WPvivid Panoramica ID CVE: CVE-2020-36842 Data di divulgazione / aggiornamento: 16 ottobre 2024 Plugin interessato: WPvivid - Migration, Backup, Staging Versioni interessate: Fino alla versione 0.9.35 inclusa Ti...

CVE-2026-1357

CVE-2026-1357 — WPvivid Backup & Migration RCE Caricamento arbitrario di file senza autenticazione → Esecuzione di codice remoto Campo| Valore ---|--- CVE| CVE-2026-1357 CVSS| 9.8 Critico Plugin| WPvivid Backup & Migration Versioni affette| ≤ 0.9.123 Versione corretta| 0.9.124 Scoperto da| Lucas...

WPvivid Backup & Migration <= 0.9.123 - Arbitrary File Upload

WPvivid Backup & Migration plugin for WordPress = 0.9.123 contains an unauthenticated arbitrary file upload vulnerability caused by improper error handling in RSA decryption and lack of path sanitization, letting unauthenticated attackers upload arbitrary PHP files and achieve remote code executi...

CVE-2025-5961

CVE-2025-5961 Migrazione, Backup, Staging – WPvivid Backup & Migration 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft...

CVE-2026-1357-Lab

CVE-2026-1357 — WPvivid Backup & Migration Verwundbare vs. gepatchte Docker-Lab-Umgebung Nur-lokal Docker-Lab zum Vergleich von WPvivid Backup & Migration: Verwundbar: 0.9.123 Gepatcht: 0.9.124 Erstellt für Lernzwecke Lab-Einrichtung, Verifizierung, Protokolle, Notizen. Alles, was mit PoC zu tun...

PoC-CVE-2026-1357

PoC CVE-2026-1357: WPvivid Backup & Migration Il plugin per WordPress Migration, Backup, Staging – WPvivid Backup & Migration è vulnerabile al caricamento arbitrario di file non autenticato nelle versioni fino alla 0.9.123 inclusa. Ciò è dovuto a una gestione impropria degli errori nel processo d...

CVE-2026-1357-POC

CVE-2026-1357 — WPvivid Backup & Migration RCE Credito CVE: Lucas Montes NiRoX Strumento di: CyberTechAjju CVSS: 9.8 Critico | Interessati: ≤ 0.9.123 | Corretto: 0.9.124 ⚠️ Disclaimer Solo per test di sicurezza autorizzati. L'accesso non autorizzato ai sistemi è illegale. Panoramica RCE non...

POC-CVE-2026-1357

CVE-2026-1357 WPvivid Backup & Migration RCE PoC Scoperto da: Lucas Montes NiRoX Vulnerabilità: Upload Arbitrario di File Non Autenticato che porta a Esecuzione di Codice Remoto RCE ID CVE: CVE-2026-1357 CVSS: Critico 9.8 Stato: Corretto nella versione 0.9.124 Panoramica Questo repository contien...

CVE-2026-1357

CVE-2026-1357 Ambiente di laboratorio per CVE-2026-1357 1. Configurare l'ambiente sudo apt update && sudo apt install docker.io docker-compose -y sudo systemctl start docker git clone Link of Repo wget https://downloads.wordpress.org/plugin/wpvivid-backuprestore.0.9.123.zip unzip...

CVE-2026-1357

CVE-2026-1357 -- WPvivid RCE Esecuzione remota di codice RCE non autenticata in WPvivid Backup & Migration 800%2C000-brightgreen?style=for-the-badge" alt="Installs" Grave vulnerabilità che impatta oltre 800.000–900.000+ siti WordPress Upload PHP arbitrario non autenticato → compromissione totale...

CVE-2026-1357

🧨 CVE-2026-1357 – Strumento di sfruttamento WPvivid Null-Key CVE-2026-1357.py Migration, Backup, Staging – WPvivid Backup & Migration ≤ 0.9.123 Vulnerabilità: Upload Arbitrario di File Non Autenticato → Esecuzione di Codice Remoto CVE: CVE-2026-1357 – CVSS 9.8 Critico GitHub:...

CVE-2024-13869

CVE-2024-13869 Migration,Backup, Staging – WPvivid 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft...

CVE-2025-5961

🚨 Migration, Backup, Staging – WPvivid Backup & Migration 📈 Questa vulnerabilità riguarda un plugin con oltre700.000+ installazioni 📝 Dettagli CVE CVE: CVE-2025-5961 CVSS: 7.2 Alto Pubblicato: 3 luglio 2025 🔍 Descrizione Il plugin Migration, Backup, Staging – WPvivid Backup & Migration per...

CVE-2026-82193

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied file name before using it to build a write path, allowing administrators to write files of permitted types to arbitrary locations on the server and to overwrite existing files...

CVE-2026-82194

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied path before using it in a file deletion routine, allowing administrators to delete arbitrary files on the server, including files outside the web root...

EUVD-2026-70911

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied path before using it in a file deletion routine, allowing administrators to delete arbitrary files on the server, including files outside the web root...

CVE-2026-82194 WPvivid Backup & Migration < 0.9.134 - Admin+ Arbitrary File Deletion via Path Traversal

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied path before using it in a file deletion routine, allowing administrators to delete arbitrary files on the server, including files outside the web root...