3 matches found
CVE-2026-17555
The WPvivid Backup & Migration plugin for WordPress is vulnerable to SQL Injection via the exportdata parameter in versions up to, and including, 0.9.131. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. The values a...
4.9CVSS0.00259EPSS
SaveExploits0References5
WordPress WPvivid Backup and Migration Plugin <= 0.9.107 is vulnerable to PHP Object Injection
Software WPvivid Backup and Migration Type Plugin Vulnerable versions = 0.9.107 Fixed in 0.9.108 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-10962 Patch priority Low CVSS severity Low 9.8 Developer Claim ownership PSID b2861821d90b Credits Webbernaut Required...
8.8CVSS6.8AI score0.00654EPSS
SaveExploits0References3Affected Software1
20