CVE-2026-19722
N/A
N/A
Summary
The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not validate the destination of files extracted from a backup package during restoration, allowing high privilege users such as administrators to write arbitrary files outside the intended restore directory, which can lead to code execution.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Unknown | WPvivid — Backup, Migration & Staging | 0 < 0.9.133 | affected |
Weaknesses
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.