Now officially on WordPress.org

CVE Database / CVE-2020-36835

CVE · Medium

CVE-2020-36835 — WPvivid — Backup, Migration & Staging [wpvivid-backuprestore] < 0.9.36

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2020-36835 WPvivid — Backup, Migration & Staging [wpvivid-backuprestore] < 0.9.36 Exposure of Sensitive Information to an Unauthorized Actor Medium 4.9 < 0.9.36 0.9.36 2020-03-23 —

CVE-2020-36835

The WPvivid backup and migration plugin allows authenticated users with low privileges to exploit an AJAX handler that lacks proper permission validation, enabling them to initiate backup transfers to arbitrary remote destinations of their choosing. This vulnerability exposes sensitive database information and affects all versions through 0.9.35, with remediation available in version 0.9.36 and later.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings