CVE-2026-115242

The WPvivid — Backup, Migration & Staging WordPress plugin versions before 0.9.137 is vulnerable to a path traversal flaw. The staging-start handler fails to properly sanitize the staging destination folder, applying only a generic text filter instead of the correct filename sanitizer used in oth...