CVE-2026-115426mediumCWE-22

CVE-2026-115426: falha de média gravidade em WPvivid — Backup, Migration & Staging

WPvivid Backup & Migration < 0.9.138 - Admin+ Path Traversal via Local Backup Directory Setting

Publicada em

Seguir esta CVE+ Monitorar WPvivid — Backup, Migration & Staging

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

33Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendcvss 5.5epss 0.2%
The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.138 does not properly validate a backup storage directory path before using it to create directories and write files, allowing administrators to cause those directories and files to be created outside the intended backup location via path traversal.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L
Produtos afetados
Unknown · WPvivid — Backup, Migration & Staging
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — WPvivid — Backup, Migration & Staging

No mesmo produto, das mais perigosas para as menos.

CVE-2026-19725CRITICALWPvivid Backup & Migration < 0.9.131 - Unauthenticated Path Traversal via send_to_site_connectEPSS 0.5%CVE-2026-19722MEDIUMWPvivid Backup & Migration < 0.9.133 - Admin+ Arbitrary File Write via Zip Slip in Backup RestoreEPSS 0.4%CVE-2026-82193MEDIUMWPvivid Backup & Migration < 0.9.134 - Admin+ File Write Outside the Backup Directory via Path TraversalEPSS 0.4%CVE-2026-82194MEDIUMWPvivid Backup & Migration < 0.9.134 - Admin+ Arbitrary File Deletion via Path TraversalEPSS 0.3%CVE-2026-82182MEDIUMWPvivid Backup & Migration < 0.9.133 - Admin+ SQLi via Upload Cleaner IsolationEPSS 0.3%CVE-2026-115242MEDIUMWPvivid Backup & Migration < 0.9.137 - Admin+ Path Traversal via Staging Site PathEPSS 0.2%