WordPress本体、WPvivid Backup & Migration、Simple JWT Login などのプラグインに複数の脆弱性が見つかりました。サイトへの影響と対策をまとめました。
WordPress本体、WPvivid Backup & Migration、Simple JWT Login などのプラグインに複数の脆弱性が見つかりました。サイトへの影響と対策をまとめました。
An attacker can create log files in any directory they choose on a WordPress site using WPvivid Backup & Migration. This can lead to sensitive information being…
Too many irrelevant or confusing CVEs? Use stackflag.com
#unknown #CVE #infosec
An attacker can create log files in any directory they choose on a WordPress site using WPvivid Backup & Migration. This can lead to sensitive information being…
Too many irrelevant or confusing CVEs? Use stackflag.com
#unknown #CVE #infosec
https://qian.cx/posts/799B8DBE-00A7-4F9F-8AF7-5F1D0C40FF9F
https://qian.cx/posts/799B8DBE-00A7-4F9F-8AF7-5F1D0C40FF9F
https://kripta.biz/posts/E2F6A739-0C4D-477B-985D-31730A37DEE3
https://kripta.biz/posts/E2F6A739-0C4D-477B-985D-31730A37DEE3
https://kripta.biz/posts/4535E2BA-4D1A-4513-95B4-3FB294290154
https://kripta.biz/posts/4535E2BA-4D1A-4513-95B4-3FB294290154
📊 4.9/10
🏢 wpvividplugins
📝 The WPvivid Backup & Migration plugin for WordPress is vulnerable to SQL Injection via the export_data parameter in versions up to, and including, ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-51791
#cybersecurity #infosec #cve #euvd
📊 4.9/10
🏢 wpvividplugins
📝 The WPvivid Backup & Migration plugin for WordPress is vulnerable to SQL Injection via the export_data parameter in versions up to, and including, ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-51791
#cybersecurity #infosec #cve #euvd
#wordfenceintelligence #CVEwordpress2026 #pluginsvulnerables #CVSSwordpress #seguridadwordpress
#wordfenceintelligence #CVEwordpress2026 #pluginsvulnerables #CVSSwordpress #seguridadwordpress
https://kripta.biz/posts/C541DCB4-D01B-4653-9929-BD2D1E03838A
https://kripta.biz/posts/C541DCB4-D01B-4653-9929-BD2D1E03838A
https://qian.cx/posts/A4CC0B50-95E0-4168-8C94-01F998778F3A
https://qian.cx/posts/A4CC0B50-95E0-4168-8C94-01F998778F3A
📊 4.4/10
🏢 wpvividplugins
📝 The WPvivid Backup for MainWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and inclu...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42791
#cybersecurity #infosec #cve #euvd
📊 4.4/10
🏢 wpvividplugins
📝 The WPvivid Backup for MainWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and inclu...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42791
#cybersecurity #infosec #cve #euvd
By: Wordpress on Thursday, July 9, 2026
By: Wordpress on Thursday, July 9, 2026
https://swale.medium.com/dockerlabs-ctf-countdown-walkthrough-wpvivid-rce-advanced-hex-file-reconstruction-1b9b081e1ec6?source=rss------bug_bounty-5
https://swale.medium.com/dockerlabs-ctf-countdown-walkthrough-wpvivid-rce-advanced-hex-file-reconstruction-1b9b081e1ec6?source=rss------bug_bounty-5
#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept #wpvivid-backuprestore
#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept #wpvivid-backuprestore
CVE ID : CVE-2025-12656
Published : June 6, 2026, 12:16 a.m. | 16 minutes ago
Description : The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbi...
CVE ID : CVE-2025-12656
Published : June 6, 2026, 12:16 a.m. | 16 minutes ago
Description : The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbi...
📊 3.8/10
🏢 wpvividplugins
📝 The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficien...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210080
#cybersecurity #infosec #cve #euvd
📊 3.8/10
🏢 wpvividplugins
📝 The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficien...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210080
#cybersecurity #infosec #cve #euvd
By: Wordpress on Monday, June 1, 2026
By: Wordpress on Monday, June 1, 2026
By: Wordpress on Wednesday, May 27, 2026
By: Wordpress on Wednesday, May 27, 2026
– Next.js: bypass d’auth via capçalera HTTP
– React2Shell (CVSS 10.0): RCE sense autenticació
– CentOS Web Panel: injecció de shell
– W3 Total Cache: injecció PHP
– WPVivid Backup: upload de fitxers sense auth
Cap zero-day.
– Next.js: bypass d’auth via capçalera HTTP
– React2Shell (CVSS 10.0): RCE sense autenticació
– CentOS Web Panel: injecció de shell
– W3 Total Cache: injecció PHP
– WPVivid Backup: upload de fitxers sense auth
Cap zero-day.
CVE-2026-1357 en WPvivid Backup expone 900.000 sitios WordPress a ejecución remota de código sin auth. Actualizá a 0.9.124 ya. Guía completa.
#wpvivid #cve20261357 #rcewordpress #backupwordpress #seguridadplugins
CVE-2026-1357 en WPvivid Backup expone 900.000 sitios WordPress a ejecución remota de código sin auth. Actualizá a 0.9.124 ya. Guía completa.
#wpvivid #cve20261357 #rcewordpress #backupwordpress #seguridadplugins