CVE-2024-1982: WPvivid Backup and Migration <= 0.9.68 - Missing Authorization
The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the getrestoreprogress() and restore() functions in all versions up to, and including, 0.9.68. This makes it possible for unauthenticated attackers to exploit a SQL injection vulnerability or trigger a DoS.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1982?
CVE-2024-1982 has a high severity rating due to the potential for unauthorized access by unauthenticated attackers.
How do I fix CVE-2024-1982?
To fix CVE-2024-1982, update the WPvivid Migration, Backup, Staging plugin to version 0.9.69 or higher.
What versions are affected by CVE-2024-1982?
CVE-2024-1982 affects all versions of the WPvivid Migration, Backup, Staging plugin up to and including version 0.9.68.
Who can exploit CVE-2024-1982?
CVE-2024-1982 can be exploited by unauthenticated attackers due to a missing capability check.
What functions are vulnerable in CVE-2024-1982?
The vulnerable functions in CVE-2024-1982 are get_restore_progress() and restore() in the WPvivid plugin.