Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-35664

WordPress WPvivid Backup for MainWP plugin <= 0.9.32 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpvividplugins WPvivid Backup for MainWP wpvivid-backup-mainwp allows Reflected XSS.This issue affects WPvivid Backup for MainWP: from n/a through <= 0.9.32.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Wpvivid Wpvivid Team
Products
Wpvivid Backup For Mainwp Wpvivid Backup For Mainwp
CVE-2024-7315

Migration, Backup, Staging – WPvivid < 0.9.106 - Unauthenticated Sensitive Data Exposure

The Migration, Backup, Staging WordPress plugin before 0.9.106 does not use sufficient randomness in the filename that is created when generating a backup, which could be bruteforced by attackers to leak sensitive information about said backups.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Wpvivid Wpvivid Team
Products
Migration\, Backup\, Staging Migration Backup Staging