Security Advisory
CVE-2026-19722
6.6
MEDIUM
Vulnerability Description
The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not validate the destination of files extracted from a backup package during restoration, allowing high privilege users such as administrators to write arbitrary files outside the intended restore directory, which can lead to code execution.
Published Date
August 30, 2026
Official Source
NIST NVD Advisory