Security Advisory

CVE-2020-36842

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-10-16 07:31:53

Last updated 2026-04-08 17:28:15

Assigner Wordfence

CVSS score 8.8

State PUBLISHED

Description

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the wpvivid_upload_import_files and wpvivid_upload_files AJAX actions that allows low-level authenticated attackers to upload zip files that can be subsequently extracted. This affects versions up to, and including 0.9.35.

← Browse all CVEs View on cve.org ↗