CVE WATCH / VULNERABILITY DETAIL
CVE-2026-115243
MEDIUMCVSS 6.7NVD feed
Published 4 November 2026 · tracked since 4 November 2026
Description
The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.137 does not validate the extension of the file it actually stores when handling an import upload: it checks the extension of a separate request field while saving the uploaded file itself with WordPress's upload type-checking dis
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-97397 HIGH 7.2
- CVE-2026-59267 HIGH 7.8
- CVE-2026-114456 MEDIUM 6.5
- CVE-2026-121925 MEDIUM 6.6
- CVE-2026-104799 HIGH 8.8
- CVE-2026-90626 HIGH 7.3
- CVE-2026-90627 MEDIUM 5.5
- CVE-2026-90628 HIGH 7.3
- CVE-2026-90629 HIGH 7.3
- CVE-2026-90634 HIGH 7.3