CVE-2026-115426

The WPvivid — Backup, Migration & Staging WordPress plugin (versions prior to 0.9.138 ) is vulnerable to a path traversal flaw. The software fails to properly validate the backup storage directory path before creating directories and writing files. This allows an administrator to cause files and ...