Wpvivid

Wpvivid develops WordPress backup, migration, and staging plugins that are widely embedded across WordPress site management and hosting infrastructure, presenting a supply-chain attack surface disproportionate to its narrow product count. Vulnerabilities affecting the vendor skew toward serious outcomes, with an elevated share reaching critical severity and a moderate tendency toward public exploit availability, reflecting both the plugins' administrative access and their prevalence in WordPress deployments. The exposure recurs across its backup and migration product lines through weakness classes including cross-site scripting, missing authorization, untrusted deserialization, sensitive-information disclosure, and path traversal—a pattern characteristic of plugins handling file operations, user inputs, and privileged data movement. Defenders should treat Wpvivid plugin updates as high-priority across their WordPress infrastructure, especially for internet-exposed administrative interfaces; live severity and exploitation counts are shown alongside this summary.