EUVD-2026-70910
GHSA-2355-wcqr-98j2
Severity by source
AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L
PR:H reflects mandatory admin authentication; S:C captures out-of-webroot write; I:L and A:L match file-type-restricted write with no confidentiality exposure.
Primary rating from Vendor (WPScan).
CVSS VectorVendor: WPScan
Lifecycle Timeline
5DescriptionCVE.org
The WPvivid - Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied file name before using it to build a write path, allowing administrators to write files of permitted types to arbitrary locations on the server and to overwrite existing files.
AnalysisAI
Arbitrary file-write via path traversal in WPvivid - Backup, Migration & Staging WordPress plugin before 0.9.134 allows authenticated administrators to place files of permitted types at any writable server path, including locations outside the WordPress installation root. The vulnerability stems from unsanitized user-supplied filenames used directly in write-path construction (CWE-22), with scope change (S:C) confirmed by the vendor CVSS vector. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated WordPress administrator account - the CVSS PR:H metric confirms this. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS vector (AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L, 5.5 Medium) reflects a meaningful but constrained risk profile. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Update the WPvivid - Backup, Migration & Staging plugin to version 0.9.134 or later, which validates the user-supplied filename before constructing the write path. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Path traversal in the WPvivid - Backup, Migration & Staging WordPress plugin before 0.9.131 lets an attacker who possess
Arbitrary file write via path traversal in the WPvivid - Backup, Migration & Staging WordPress plugin (versions before 0
Arbitrary file deletion in WPvivid - Backup, Migration & Staging WordPress plugin before 0.9.134 allows authenticated ad
SQL injection in the WPvivid Backup, Migration & Staging WordPress plugin (all versions before 0.9.133) allows authentic
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today