WPvivid — Backup, Migration & Staging

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   WPvivid — Backup, Migration & Staging

Information

Software Type Plugin
Software Slug wpvivid-backuprestore (view on wordpress.org)
Software Status Active
Software Author wpvividplugins
Software Downloads 18,682,353
Software Active Installs 900,000
Software Record Last Updated August 8, 2026

Showing 1-20 of 28 Vulnerabilities

Submit a Vulnerability
WPvivid <= 0.9.131 - Authenticated (Administrator+) SQL Injection via 'export_data' Parameter
4.9
CVE-2026-17555
Jul 31, 2026
Researcher: Wordfence PRISM
Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletion
3.8
CVE-2025-12656
Jun 5, 2026
Researcher: blue0x1
Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload
9.8
CVE-2026-1357
Feb 10, 2026
Researcher: Lucas Montes (NiRoX)
Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation
2.7
CVE-2025-12654
Dec 20, 2025
Researcher: blue0x1
Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload
7.2
CVE-2025-5961
Jul 3, 2025
Researcher: Ryan Kozak
Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file
7.2
CVE-2024-13869
Feb 21, 2025
Researcher: Ryan Kozak
WPvivid Backup and Migration <= 0.9.106 - Missing Authorization
5.3
CVE-2024-56273
Jan 3, 2025
Researcher: Rafie Muhammad
Migration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection
8.8
CVE-2024-10962
Nov 13, 2024
Researcher: Webbernaut
Migration, Backup, Staging – WPvivid <= 0.9.105 - Sensitive Information Exposure
7.5
CVE-2024-7315
Sep 11, 2024
Researcher: Dmitrii Ignatyev
WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization
7.2
CVE-2024-3054
Apr 11, 2024
Researcher: Maksim Kosenko
WPvivid Backup and Migration <= 0.9.68 - Missing Authorization
6.5
CVE-2024-1982
Feb 28, 2024
Researcher: Denis Werner
WPvivid Backup and Migration <= 0.9.68 - Unauthenticated SQL Injection
9.8
CVE-2024-1981
Feb 28, 2024
Researcher: Denis Werner
WPvivid <= 0.9.94 - Missing Authorization
4.3
CVE-2023-4637
Jan 19, 2024
Researcher: Revan Arifio
Migration, Backup, Staging – WPvivid <= 0.9.91 - Google Drive Client Secret Exposure
8.0
CVE-2023-5576
Oct 13, 2023
Researchers:
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal
8.7
CVE-2023-4274
Sep 22, 2023
Researcher: Ivan Kuzymchak
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-5121
Sep 22, 2023
Researcher: Ivan Kuzymchak
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting
4.4
CVE-2023-5120
Sep 22, 2023
Researcher: Ivan Kuzymchak
WPvivid Backup Plugin <= 0.9.90 - Missing Authorization via 'start_staging' and 'get_staging_progress'
8.3
CVE-2023-41243
Sep 12, 2023
Researcher: Nguyen Anh Tien
WPvivid Backup 0.9.76 - Authenticated (Administrator+) Arbitrary File Deletion
6.5
CVE ID Unknown
Aug 29, 2022
Researchers:
Migration, Backup, Staging – WPvivid <= 0.9.75 - Authenticated (Administrator+) Path Traversal
6.5
CVE-2022-2863
Aug 22, 2022
Researcher: Rodolfo Tavares
Title Status CVE ID CVSS Researchers Date
WPvivid <= 0.9.131 - Authenticated (Administrator+) SQL Injection via 'export_data' Parameter Patched CVE-2026-17555 4.9 Wordfence PRISM July 31, 2026
Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletion Patched CVE-2025-12656 3.8 blue0x1 June 5, 2026
Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload Patched CVE-2026-1357 9.8 Lucas Montes (NiRoX) February 10, 2026
Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation Patched CVE-2025-12654 2.7 blue0x1 December 20, 2025
Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload Patched CVE-2025-5961 7.2 Ryan Kozak July 3, 2025
Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file Patched CVE-2024-13869 7.2 Ryan Kozak February 21, 2025
WPvivid Backup and Migration <= 0.9.106 - Missing Authorization Patched CVE-2024-56273 5.3 Rafie Muhammad January 3, 2025
Migration, Backup, Staging – WPvivid <= 0.9.107 - Unauthenticated PHP Object Injection Patched CVE-2024-10962 8.8 Webbernaut November 13, 2024
Migration, Backup, Staging – WPvivid <= 0.9.105 - Sensitive Information Exposure Patched CVE-2024-7315 7.5 Dmitrii Ignatyev September 11, 2024
WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization Patched CVE-2024-3054 7.2 Maksim Kosenko April 11, 2024
WPvivid Backup and Migration <= 0.9.68 - Missing Authorization Patched CVE-2024-1982 6.5 Denis Werner February 28, 2024
WPvivid Backup and Migration <= 0.9.68 - Unauthenticated SQL Injection Patched CVE-2024-1981 9.8 Denis Werner February 28, 2024
WPvivid <= 0.9.94 - Missing Authorization Patched CVE-2023-4637 4.3 Revan Arifio January 19, 2024
Migration, Backup, Staging – WPvivid <= 0.9.91 - Google Drive Client Secret Exposure Patched CVE-2023-5576 8.0 October 13, 2023
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal Patched CVE-2023-4274 8.7 Ivan Kuzymchak September 22, 2023
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Stored Cross-Site Scripting Patched CVE-2023-5121 4.4 Ivan Kuzymchak September 22, 2023
Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting Patched CVE-2023-5120 4.4 Ivan Kuzymchak September 22, 2023
WPvivid Backup Plugin <= 0.9.90 - Missing Authorization via 'start_staging' and 'get_staging_progress' Patched CVE-2023-41243 8.3 Nguyen Anh Tien September 12, 2023
WPvivid Backup 0.9.76 - Authenticated (Administrator+) Arbitrary File Deletion Patched 6.5 August 29, 2022
Migration, Backup, Staging – WPvivid <= 0.9.75 - Authenticated (Administrator+) Path Traversal Patched CVE-2022-2863 6.5 Rodolfo Tavares August 22, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation