CVE-2023-5576 HIGH

CVE-2023-5576: Migration, Backup, Staging – WPvivid <= 0.9.91 - Google Drive Client Secret Exposure

Vendor Wpvividplugins
Product WPvivid — Backup, Migration & Staging
Weakness CWE-200 · Info exposure
Published October 20, 2023
Last update April 8, 2026
View on NVD All CVEs

CVSS base score

8.0/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

What the vulnerability does

01Description

The Migration, Backup, Staging - WPvivid plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 0.9.91 via Google Drive API secrets stored in plaintext in the publicly visible plugin source. This could allow unauthenticated attackers to impersonate the WPVivid Google Drive account via the API if they can trick a user into reauthenticating via another vulnerability or social engineering.

Key dates

02Disclosure timeline

October 20, 2023 CVE published
April 8, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-0909 Anonymous Restricted Content <= 1.6.2 - Protection Mechanism Bypass CVE-2021-32050 Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application CVE-2026-41032 Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers CVE-2024-42338 CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CVE-2021-25432