https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-5961.htmlhttps://patchthecve.com/cve/CVE-2025-5961.htmlWed, 17 Jun 2026 09:49:06 +0000HIGH 7.2: The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpvivid_upload_import_files' function in all versions up to, and including, 0.9.116. This makes it possible for authenticated attackershttps://patchthecve.com/cve/CVE-2024-56273.htmlhttps://patchthecve.com/cve/CVE-2024-56273.htmlWed, 17 Jun 2026 08:11:57 +0000MEDIUM 4.3: Missing Authorization vulnerability in wpvividplugins WPvivid Backup and Migration wpvivid-backuprestore allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPvivid Backup and Migration: from n/a through <= 0.9.106.https://patchthecve.com/cve/CVE-2024-10962.htmlhttps://patchthecve.com/cve/CVE-2024-10962.htmlWed, 17 Jun 2026 06:56:47 +0000HIGH 8.8: The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 0.9.107 via deserialization of untrusted input in the 'replace_row_data' and 'replace_serialize_data' functions. This makes it possible for unauthenticated attackhttps://patchthecve.com/cve/CVE-2020-36842.htmlhttps://patchthecve.com/cve/CVE-2020-36842.htmlWed, 17 Jun 2026 03:16:18 +0000HIGH 8.8: The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the wpvivid_upload_import_files and wpvivid_upload_files AJAX actions that allows low-level authenticated attackers to upload zip files that can be subsequently https://patchthecve.com/cve/CVE-2020-36835.htmlhttps://patchthecve.com/cve/CVE-2020-36835.htmlWed, 17 Jun 2026 03:16:17 +0000MEDIUM 4.9: The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to sensitive information disclosure of a WordPress site's database due to missing capability checks on the wp_ajax_wpvivid_add_remote AJAX action that allows low-level authenticated attackers to send back-ups to a remote loc