Search Results (21 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-36842 1 Wpvivid 1 Migration\, Backup\, Staging 2024-10-30 8.8 High
The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the wpvivid_upload_import_files and wpvivid_upload_files AJAX actions that allows low-level authenticated attackers to upload zip files that can be subsequently extracted. This affects versions up to, and including 0.9.35.