WordPress Vulnerability Report: WPvivid Backup Plugin
Introduction
On January 12, 2026, a critical vulnerability was discovered in the WPvivid Backup plugin for WordPress, affecting over 800,000 active users.
Vulnerability Explanation
This flaw allows unauthenticated attackers to upload arbitrary files to a vulnerable site, potentially leading to remote code execution and a complete site takeover. The issue arises from improper error handling and a lack of file type checks.
Affected Component
The vulnerability impacts versions 0.9.123 and earlier of the WPvivid Backup plugin.
Impact
Exploiting this vulnerability could allow attackers to execute malicious code on compromised sites, posing a significant risk to security.
Fix
Users are urged to update to version 0.9.124, which has been patched to prevent this exploit.
Risk Level
The vulnerability has a critical risk rating of 9.8 out of 10. Immediate action is recommended to secure affected sites.
Source: View Original Report
