Is WPvivid safe?

Every recorded flaw

• Sep 4, 2026WPvivid — Backup, Migration & Staging: Does not validate a user supplied path before using it in a file deletion routineCVE-2026-82194 · fixed in 0.9.134 · reported by WPScanMedium 5.5
• Sep 4, 2026WPvivid — Backup, Migration & Staging: Does not validate a user supplied file name before using it to build a write pathCVE-2026-82193 · fixed in 0.9.134 · reported by WPScanMedium 5.5
• Sep 2, 2026WPvivid — Backup, Migration & Staging: Does not sanitise a user supplied list of identifiers before using it in a SQL queryCVE-2026-82182 · fixed in 0.9.133 · reported by WPScanMedium 4.1
• Aug 30, 2026WPvivid — Backup, Migration & Staging: Does not validate the destination of files extracted from a backup package during restorationCVE-2026-19722 · fixed in 0.9.133 · reported by WPScanMedium 6.6
• Aug 16, 2026WPvivid — Backup, Migration & Staging: Does not sanitise a value taken from an unauthenticated request before using it to build a log file pathCVE-2026-19725 · fixed in 0.9.131 · reported by WPScanCritical 9.1
• Aug 1, 2026WPvivid Backup & Migration: SQL InjectionCVE-2026-17555 · affects up to 0.9.131 · reported by WordfenceMedium 4.9
• Jun 5, 2026Migration, Backup, Staging – WPvivid Backup & Migration: Arbitrary directory deletionCVE-2025-12656 · affects up to 0.9.128 · reported by WordfenceLow 3.8
• Feb 11, 2026Migration, Backup, Staging – WPvivid Backup & Migration: Unauthenticated Arbitrary File UploadCVE-2026-1357 · affects up to 0.9.123 · reported by Wordfence35% oddsCritical 9.8
• Dec 20, 2025Migration, Backup, Staging – WPvivid Backup & Migration: Arbitrary directory creationCVE-2025-12654 · affects up to 0.9.120 · reported by WordfenceLow 2.7
• Jul 3, 2025Migration, Backup, Staging – WPvivid Backup & Migration: Arbitrary file uploadsCVE-2025-5961 · affects up to 0.9.116 · reported by Wordfence55% oddsHigh 7.2
• Feb 22, 2025Migration, Backup, Staging – WPvivid Backup & Migration: Arbitrary file uploadsCVE-2024-13869 · affects up to 0.9.112 · reported by Wordfence2.3% oddsHigh 7.2
• Jan 7, 2025WPvivid Backup and Migration: Missing AuthorizationCVE-2024-56273 · affects up to 0.9.106 · reported by PatchstackMedium 4.3
• Nov 14, 2024Migration, Backup, Staging – WPvivid: PHP Object InjectionCVE-2024-10962 · affects up to 0.9.107 · reported by WordfenceHigh 8.8
• Oct 16, 2024Migration, Backup, Staging – WPvivid: Arbitrary file uploadsCVE-2020-36842 · affects up to 0.9.35 · reported by Wordfence1.2% oddsHigh 8.8
• Oct 16, 2024Migration, Backup, Staging – WPvivid: Sensitive information disclosure of a WordPress site's databaseCVE-2020-36835 · affects up to 0.9.35 · reported by WordfenceMedium 4.9
• Oct 2, 2024Migration, Backup, Staging: Does not use sufficient randomness in the filename that is createdCVE-2024-7315 · fixed in 0.9.106 · reported by WPScanHigh 7.5
• May 17, 2024WPvivid Backup and Migration: Improper Privilege ManagementCVE-2023-41243 · affects up to 0.9.90 · reported by PatchstackHigh 8.8
• Apr 12, 2024WPvivid Backup & Migration Plugin for WordPress is vulnerable to PHAR Deserialization in all versions up to, and including, 0.9.99 via deserialization of untrusCVE-2024-3054 · affects up to 0.9.99 · reported by Wordfence42% oddsHigh 7.2
• Feb 29, 2024Migration, Backup, Staging – WPvivid: Unauthorized accessCVE-2024-1982 · affects up to 0.9.68 · reported by WordfenceMedium 6.5
• Feb 29, 2024Migration, Backup, Staging – WPvivid: SQL InjectionCVE-2024-1981 · affects up to 0.9.68 · reported by Wordfence1.1% oddsCritical 9.8
• Feb 5, 2024WPvivid: Unauthorized access of dataCVE-2023-4637 · affects up to 0.9.94 · reported by WordfenceMedium 4.3
• Oct 20, 2023Migration, Backup, Staging – WPvivid: Stored Cross-Site ScriptingCVE-2023-5121 · affects up to 0.9.89 · reported by WordfenceMedium 4.4
• Oct 20, 2023Migration, Backup, Staging - WPvivid: Sensitive Information ExposureCVE-2023-5576 · affects up to 0.9.91 · reported by WordfenceHigh 8
• Oct 20, 2023Migration, Backup, Staging – WPvivid: Stored Cross-Site ScriptingCVE-2023-5120 · affects up to 0.9.89 · reported by WordfenceMedium 4.4
• Oct 20, 2023Migration, Backup, Staging – WPvivid: Directory TraversalCVE-2023-4274 · affects up to 0.9.89 · reported by Wordfence1.5% oddsHigh 8.7
• Sep 16, 2022Migration, Backup, Staging: Does not sanitise and validate a parameter before using it to read the content of a fileCVE-2022-2863 · fixed in 0.9.76 · reported by WPScan25% oddsMedium 4.9
• Sep 6, 2022Migration, Backup, Staging – WPvivid: Deserialization of untrusted inputCVE-2022-2442 · affects up to 0.9.74 · reported by Wordfence1.8% oddsHigh 7.2
• Apr 11, 2022WPvivid Team Migration, Backup, Staging – WPvivid: Arbitrary File ReadCVE-2022-27844 · affects up to 0.9.70 · reported by Patchstack1.5% oddsLow 2.7
• Apr 11, 2022Migration, Backup, Staging: Does not sanitise and escape the sub_page parameter before outputting it back in the pageCVE-2022-0531 · fixed in 0.9.70 · reported by WPScanMedium 6.1
• Feb 28, 2022Migration, Backup, Staging: Does not have authorisationCVE-2021-24994 · fixed in 0.9.69 · reported by WPScan1.2% oddsMedium 6.1

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.