File and Path Handling

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. WordPress WPvivid Backup & Migration Plugin <= 0.9.116 - Authenticated Arbitrary File UploadCVE-2025-5961wpvividplugins · CVSS 7.2 · 55% likely

   CWE-434

2. WPvivid Backup & Migration <= 0.9.123 - Arbitrary File UploadCVE-2026-1357wpvividplugins · CVSS 9.8 · 39% likelycovered by CyberSIXT

   CWE-434

3. Migration, Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_fileCVE-2024-13869wpvividplugins · CVSS 7.2 · 2.3% likely

   CWE-434

4. The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 0.9.89. This allows authenticated attackers wi…CVE-2023-4274wpvividplugins · CVSS 8.7 · 1.5% likely

   CWE-22

5. Migration, Backup, Staging – WPvivid <= 0.9.35 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2020-36842wpvividplugins · CVSS 8.8 · 1.2% likely

   CWE-434

6. Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory CreationCVE-2025-12654wpvividplugins · CVSS 2.7 · 0.4% likely

   CWE-73

7. Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory DeletionCVE-2025-12656wpvividplugins · CVSS 3.8 · 0.4% likely

   CWE-73

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.