Directory Traversal Vulnerability in WPvivid Plugin for WordPress
CVE-2023-4274
8.7HIGH
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 20 October 2023
What is CVE-2023-4274?
The WPvivid plugin for WordPress, up to version 0.9.89, is susceptible to a directory traversal vulnerability. This flaw permits authenticated users with administrative rights to traverse directories on the server, enabling them to delete files in arbitrary locations. Such exploitation can result in significant data loss and compromises server integrity, particularly in shared hosting environments. Therefore, website administrators should ensure they are using the latest version of the plugin to mitigate this risk.
Affected Version(s)
Migration, Backup, Staging – WPvivid 0.9.89