Vulnerabilities > Wpvivid > Migration Backup Staging > 0.9.90

DATE CVE VULNERABILITY TITLE RISK
2024-02-05 CVE-2023-4637 Missing Authorization vulnerability in Wpvivid Migration, Backup, Staging
The WPvivid plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the restore() and get_restore_progress() function in versions up to, and including, 0.9.94.
network
low complexity
wpvivid CWE-862
5.3
2023-10-20 CVE-2023-5576 Unspecified vulnerability in Wpvivid Migration, Backup, Staging
The Migration, Backup, Staging - WPvivid plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 0.9.91 via Google Drive API secrets stored in plaintext in the publicly visible plugin source.
network
low complexity
wpvivid
critical
9.3