CVE-2023-4274

CVE-2023-4274 is a Directory Traversal vulnerability affecting the WPvivid Migration, Backup, Staging plugin for WordPress, specifically versions up to and including 0.9.89. This flaw allows authenticated administrative users to delete the contents of arbitrary server directories, posing a significant risk, especially in shared hosting environments. The vulnerability carries a CVSS score of 6.5 (Medium), indicating a network-based attack with low complexity, requiring high privileges, and leading to high impact on integrity and availability. While it requires administrative access, the potential for data destruction is substantial. Currently, there is no evidence of active exploitation, nor are there publicly available exploit tools like Metasploit or Nuclei modules. Community discussion and media coverage for this CVE are minimal, suggesting low awareness and a lack of widespread attention.