Threats tagged 'ghsa-2q5f-v38g-c39x'

The WPvivid Backup, Migration & Staging WordPress plugin versions prior to 0.9.138 contains a vulnerability where it does not properly validate backup storage directory paths. This flaw allows an administrator to create directories and write files outside the intended backup location through path traversal.