← Back

Wpvivid

wpvivid

23 CVEs • 3 products

Products (3)

Click to collapse
Toggle

CVEs (23)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Wpvivid
1Migration, Backup, Staging
Nov 21, 2024
Apr 11, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Arbitrary File Read vulnerability in WPvivid Team Migration, Backup, Staging – WPvivid (WordPress plugin) versions <= 0.9.70
1Wpvivid
1Migration, Backup, Staging
Nov 21, 2024
Apr 11, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Migration, Backup, Staging WordPress plugin before 0.9.70 does not sanitise and escape the sub_page parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting
1Wpvivid
1Migration, Backup, Staging
Nov 21, 2024
Feb 28, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Migration, Backup, Staging WordPress plugin before 0.9.69 does not have authorisation when adding remote storages, and does not sanitise as well as escape a parameter from such unauthenticated requests before outputt...Show more
The Migration, Backup, Staging WordPress plugin before 0.9.69 does not have authorisation when adding remote storages, and does not sanitise as well as escape a parameter from such unauthenticated requests before outputting it in admin page, leading to a Stored Cross-Site Scripting issueShow less