CVE-2023-4274

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 0.9.89

High · published October 20, 2023

CVSS v3.1
8.7
EPSS
2%
Percentile
74.5
In the wild
Unconfirmed
What it is

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 0.9.89. This allows authenticated attackers with administrative privileges to delete the contents of arbitrary directories on the server, which can be a critical issue in a shared environments.

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01528 · 74.5th percentile
Published
2023-10-20T06:35Z
EPSS history
Timeline
  • 20 OCT 06:35Z
    The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 0.9.89
    cvelistv5