CVE-2022-2863

CVE-2022-2863: WPvivid Backup < 0.9.76 - Admin+ Arbitrary File Read

Vendor Unknown

Product Migration, Backup, Staging – WPvivid

Weakness CWE-22 · Path traversal

Published September 16, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the content of a file, allowing high privilege users to read any file from the web server via a Traversal attack

Key dates

02Disclosure timeline

September 16, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-2863 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/22.html

Related vulnerabilities

04Related CVE

CVE-2024-52396 WordPress WOLF plugin <= 1.0.8.3 - CSV Limited Path Traversal vulnerability CVE-2023-34217 Second Order Command-injection Vulnerability in the Certificate-delete Function CVE-2025-66480 Wildfire has Arbitrary File Upload via Directory Traversal in UploadFileAction CVE-2025-3445 CVE-2026-33077 Roxy-WI has an arbitrary file read vulnerability