References https://nvd.nist.gov/vuln/detail/CVE-2025-5961 https://github.com/d0n601/CVE-2025-5961 https://www.rapid7.com/db/vulnerabilities/wpvivid-backuprestore-plugin-cve-2025-5961/ https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wpvivid-backuprestore/migration-backup-staging-wpvivid-backup-migration-09116-authenticated-administrator-arbitrary-file-upload https://github.com/advisories/GHSA-49m8-x93v-846r https://plugins.trac.wordpress.org/browser/wpvivid-backuprestore/trunk/includes/class-wpvivid-export-import.php https://www.cve.org/CVERecord?id=CVE-2025-5961
Related VulnerabilitiesPoCCVE-2026-1357: WPvivid Backup & Migration <= 0.9.123 - Arbitrary File UploadPoCCVE-2022-2863: WordPress WPvivid Backup <0.9.76 - Local File InclusionPoCCVE-2025-5961: WordPress WPvivid Backup & Migration Plugin <= 0.9.116 - Authenticated Arbitrary File UploadWordPress WPvivid Backup插件PHAR不安全的反序列化漏洞WordPress 插件 WPvivid CVE-2024-1981 SQL注入漏洞WordPress 插件 WPvivid 未授权访问漏洞WordPress WPvivid Backup插件class-wpvivid-export-import目录遍历漏洞