Bleepingcomputer

Critical RCE Vulnerability in WPvivid Plugin Affects 900,000 WordPress Sites

First seen 12 Feb 2026, 21:16 UTC • Cybersecuritynews

+4 •65.6

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A critical vulnerability in the WPvivid Backup & Migration plugin, affecting over 900,000 WordPress sites, allows unauthenticated attackers to upload files and execute code remotely. This flaw, tracked as CVE-2026-1357, has a severity score of 9.8 and impacts all versions up to 0.9.123. A fix is reportedly available.

How this analysis works

Timeline

2026-02-11

CVE-2026-1357 published

2026-02-11

First public PoC released

2026-02-12

Articles published detailing the vulnerability

Attack Flow

Continue Reading

Critical RCE Vulnerabilities in Joomla Extensions CVE-2026-48907 & CVE-2026-48908 Critical Joomla JCE Vulnerability Under Active Exploitation Critical NGINX Vulnerability CVE-2026-42945 Exposes Millions to RCE and DoS Attacks Critical RCE Vulnerability in Blocksy Companion Pro Plugin Discovered Operation Endgame Disrupts Evil Corp's SocGholish Malware Network Belarusian Hackers Target Yury Hubarevich with Sophisticated Phishing Attack

Critical RCE Vulnerability in WPvivid Plugin Affects 900,000 WordPress Sites

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading