CVE-2026-1357

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

February 12, 2026

Last Seen

February 13, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in WPvivid Plugin Affects 900,000 WordPress Sites65.6

A critical vulnerability in the WPvivid Backup & Migration plugin, affecting over 900,000 WordPress sites, allows unauthenticated attackers to upload files and execute code remotely. This flaw, tracked as CVE-2026-1357, has a severity score of 9.8 and impacts all versions up to 0.9.123. A fix is rep...

Over 40,000 WordPress Sites Compromised by SQL Injection Vulnerability65.0

An SQL injection vulnerability has been identified in versions 10.3.1 and prior of the QSM plugin for WordPress, affecting over 40,000 sites. Users with 'subscriber' accounts or higher privileges can exploit this flaw, as noted in a security advisory from Patchstack.