WordPress plugin with 900k installs vulnerable to critical RCE flaw

News Companies Events

Statistics About NLC

News Companies Events

WordPress plugin with 900k installs vulnerable to critical RCE flaw

Image for the article: WordPress plugin with 900k installs vulnerable to critical RCE flaw

WordPress plugin with 900k installs vulnerable to critical RCE flaw

Thu Feb 12 2026

Vulnerability

www.bleepingcomputer.com

A critical vulnerability in the WPvivid Backup & Migration plugin for WordPress, installed on more than 900,000 websites, can be exploited to achieve remote code execution by uploading arbitrary files without authentication. [...]