The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 is vulnerable to SQL injection attacks due to unsanitized user-supplied identifiers used in a SQL query. This CVE record was published on 2026-09-02T06:17:19.890Z and was last modified on 2026-09-03T17:49:19.180Z. The NVD entry is currently Deferred. Administrators using the WPvivid plugin should assess exposure and verify their ver [truncated]
The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 is vulnerable to a log file path manipulation attack, allowing an unauthenticated attacker with a site-to-site transfer key to create log files in any writable directory, including the web root. This vulnerability enables potential log file manipulation, which could obscure malicious activity. The CVE record, published on 2026-08-16 [truncated]
