https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-5961.htmlhttps://patchthecve.com/cve/CVE-2025-5961.htmlWed, 17 Jun 2026 09:49:06 +0000HIGH 7.2: The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpvivid_upload_import_files' function in all versions up to, and including, 0.9.116. This makes it possible for authenticated attackershttps://patchthecve.com/cve/CVE-2024-13869.htmlhttps://patchthecve.com/cve/CVE-2024-13869.htmlWed, 17 Jun 2026 07:02:53 +0000HIGH 7.2: The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_files' function in all versions up to, and including, 0.9.112. This makes it possible for authenticated attackers, with Administhttps://patchthecve.com/cve/CVE-2024-56273.htmlhttps://patchthecve.com/cve/CVE-2024-56273.htmlWed, 17 Jun 2026 08:11:57 +0000MEDIUM 4.3: Missing Authorization vulnerability in wpvividplugins WPvivid Backup and Migration wpvivid-backuprestore allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPvivid Backup and Migration: from n/a through <= 0.9.106.https://patchthecve.com/cve/CVE-2024-10962.htmlhttps://patchthecve.com/cve/CVE-2024-10962.htmlWed, 17 Jun 2026 06:56:47 +0000HIGH 8.8: The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 0.9.107 via deserialization of untrusted input in the 'replace_row_data' and 'replace_serialize_data' functions. This makes it possible for unauthenticated attackhttps://patchthecve.com/cve/CVE-2020-36842.htmlhttps://patchthecve.com/cve/CVE-2020-36842.htmlWed, 17 Jun 2026 03:16:18 +0000HIGH 8.8: The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the wpvivid_upload_import_files and wpvivid_upload_files AJAX actions that allows low-level authenticated attackers to upload zip files that can be subsequently https://patchthecve.com/cve/CVE-2020-36835.htmlhttps://patchthecve.com/cve/CVE-2020-36835.htmlWed, 17 Jun 2026 03:16:17 +0000MEDIUM 4.9: The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to sensitive information disclosure of a WordPress site's database due to missing capability checks on the wp_ajax_wpvivid_add_remote AJAX action that allows low-level authenticated attackers to send back-ups to a remote lochttps://patchthecve.com/cve/CVE-2023-41243.htmlhttps://patchthecve.com/cve/CVE-2023-41243.htmlWed, 17 Jun 2026 06:21:19 +0000HIGH 8.8: Improper Privilege Management vulnerability in WPvivid Team WPvivid Backup and Migration allows Privilege Escalation.This issue affects WPvivid Backup and Migration: from n/a through 0.9.90.https://patchthecve.com/cve/CVE-2024-3054.htmlhttps://patchthecve.com/cve/CVE-2024-3054.htmlWed, 17 Jun 2026 07:43:13 +0000HIGH 7.2: WPvivid Backup & Migration Plugin for WordPress is vulnerable to PHAR Deserialization in all versions up to, and including, 0.9.99 via deserialization of untrusted input at the wpvividstg_get_custom_exclude_path_free action. This is due to the plugin not providing sufficient path validation on the t