Pricing
Solutions
WordPress security
Instantly fix and mitigate vulnerabilities
Plugin auditing
Paid auditing for WordPress vendors
Managed VDP
Start a security program for your plugins
Bug Bounty
Join the community and earn bounties
Enterprise API
At scale monitoring and vPatching for hosts
Vulnerability database
The latest WordPress security intelligence
Login
Start trial
WPvivid Backup and Migration
wpvividplugins
Developer
0.9.121
Latest version
800,000
Installations
1 minute ago
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
21 fixed
7 Mitigation rules
Authenticated (Administrator+) Arbitrary File Upload vulnerability
<= 0.9.116
Jul 3, 2025
Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file vulnerability
<= 0.9.112
Feb 22, 2025
Broken Access Control vulnerability
<= 0.9.106
Jan 3, 2025
Unauthenticated PHP Object Injection vulnerability
<= 0.9.107
Nov 14, 2024
Unauthenticated Sensitive Data Exposure vulnerability
< 0.9.106
Sep 12, 2024
Authenticated (Admin+) PHAR Deserialization vulnerability
<= 0.9.99
Apr 15, 2024
Missing Authorization vulnerability
<= 0.9.94
Jan 22, 2024
Missing Authorization vulnerability
<= 0.9.68
Jan 8, 2024
Unauthenticated SQL Injection vulnerability
<= 0.9.68
Jan 8, 2024
Google Drive Client Secret Exposure vulnerability
<= 0.9.91
Oct 16, 2023
Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal vulnerability
<= 0.9.89
Sep 25, 2023
Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability
<= 0.9.89
Sep 25, 2023
Authenticated(Administrator+) Stored Cross-Site Scripting vulnerability
<= 0.9.90
Sep 13, 2023
Privilege Escalation on Staging Environment vulnerability
<= 0.9.90
Sep 13, 2023
Authenticated Arbitrary File Deletion vulnerability
0.9.76
Aug 29, 2022
Authenticated PHAR Deserialization vulnerability
<= 0.9.74
Aug 18, 2022
Arbitrary File Read vulnerability
<= 0.9.70
Apr 7, 2022
Reflected Cross-Site Scripting (XSS) vulnerability
<= 0.9.69
Mar 21, 2022
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability
<= 0.9.68
Jan 31, 2022
SQL Injection (SQLi) vulnerability
<= 0.9.52
Apr 26, 2021
Missing Authorization vulnerability leading to Database Leak
<= 0.9.35
Feb 28, 2020