CVE-2026-19722 in WPvivid Plugin
요약
\~에 의해 MITRE • 2026. 08. 30.
The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not validate the destination of files extracted from a backup package during restoration, allowing high privilege users such as administrators to write arbitrary files outside the intended restore directory, which can lead to code execution.
If you want to get best quality of vulnerability data, you may have to visit VulDB.