Threats tagged 'ghsa-799w-j885-wg7g'

A vulnerability in the WPvivid — Backup, Migration & Staging WordPress plugin before version 0.9.137 allows an authenticated administrator to supply a staging destination path containing directory traversal sequences. This causes the plugin to write copied site files outside the intended WordPress installation directory due to insufficient sanitization of the staging destination folder parameter.