CVE-2020-36835

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to sensitive information disclosure of a site's database in versions up to and including 0.9.35 . The root cause is a missing capability check on the wp_ajax_wpvivid_add_remote AJAX action. This flaw allows low-level auth...