CVE-2024-13869

creationtimestamp| type| source ---|---|--- 2025-02-22 13:22:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5025 2025-02-22 15:52:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lirogkgqri2k 2025-02-22 16:39:53+00:00| seen| https://t.me/cvedetector/18720 2025-02-23...

CVE-2024-13869 Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file

The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'uploadfiles' function in all versions up to, and including, 0.9.112. This makes it possible for authenticated attackers, with...

CVE-2024-13869 Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file

The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'uploadfiles' function in all versions up to, and including, 0.9.112. This makes it possible for authenticated attackers, with...

CVE-2024-13869

CVE-2024-13869 affects Migration, Backup, Staging – WPvivid Backup & Migration for WordPress. Wordfence notes a vulnerability in the wpvivid_upload_file path that allows an authenticated attacker with Admin+ privileges to upload arbitrary files, enabling potential remote code execution. Versions ...

Exploit for Unrestricted Upload of File with Dangerous Type in Wpvivid Wpvivid_Backup_\&_Migration

CVE-2024-13869 Migration,Backup, Staging – WPvivid = 0...