WPvivid — Backup, Migration & Staging

Vulnerabilities 37Slug wpvivid-backuprestoreLatest version 0.9.126WordPress.org →

Minimum safe version

0.9.124

Update to 0.9.124 or later to address 37 fixable vulnerabilities

Latest available0.9.126 ✓
N/A
2026-02-10< 0.9.124

Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload

WordfenceCVE
High 7.2
2025-07-03< 0.9.117

Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload

WordfenceEUVDCVE
High 8.8
2024-10-16< 0.9.36

CVE-2020-36842

CVE
Medium 4.9
2024-10-16< 0.9.36

CVE-2020-36835

CVE
High 7.2
2024-04-15< 0.9.100

WordPress WPvivid Backup and Migration Plugin <= 0.9.99 is vulnerable to PHP Object Injection

PatchstackCVEWordfence
N/A
2023-09-13< 0.9.91

WordPress WPvivid Backup and Migration Plugin <= 0.9.90 is vulnerable to Cross Site Scripting (XSS)

Patchstack
N/A
< 0.9.91

Migration, Backup, Staging &ndash; WPvivid &lt;= 0.9.90 - Authenticated(Administrator+) Stored Cross-Site Scripting

Wordfence
N/A
2023-09-12< 0.9.91

WPvivid Backup Plugin <= 0.9.90 - Missing Authorization via 'start_staging' and 'get_staging_progress'

Wordfence
N/A
< 0.9.36

WPvivid Backup &lt; 0.9.36 - Missing Authorization Leading To Database Leak

WPScan
N/A
< 0.9.77

WPvivid Backup 0.9.76 - Admin+ Arbitrary File Deletion

WPScan
N/A
< 0.9.56

WPvivid Backup &lt; 0.9.56 - Reflected Cross-Site Scripting

WPScan
N/A
2020-03-13< 0.9.36

Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File Upload

Wordfence
N/A
2020-03-23< 0.9.36

Migration, Backup, Staging – WPvivid <= 0.9.35 - Sensitive Information Disclosure

Wordfence
N/A
2021-08-09< 0.9.56

Migration, Backup, Staging – WPvivid <= 0.9.55 - Reflected Cross-Site Scripting

Wordfence
N/A
2022-08-16< 0.9.76

Migration, Backup, Staging – WPvivid <= 0.9.75 - Authenticated (Admin+) Directory Traversal

Wordfence
N/A
2022-08-29< 0.9.77

WPvivid Backup 0.9.76 - Authenticated (Administrator+) Arbitrary File Deletion

Wordfence
N/A
2022-08-29< 0.9.77

WordPress WPvivid Backup plugin 0.9.76 - Authenticated Arbitrary File Deletion vulnerability

Patchstack
N/A
2020-02-28< 0.9.36

WordPress WPvivid Backup and Migration plugin <= 0.9.35 - Missing Authorization vulnerability leading to Database Leak

Patchstack
N/A
2021-04-26< 0.9.53

WordPress WPvivid Backup and Migration plugin <= 0.9.52 - SQL Injection (SQLi) vulnerability

Patchstack