CVE-2023-4274

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 0.9.89. This allows authenticated attackers with administrative privileges to delete the contents of arbitrary directories on the server, which can be a critical issue in a shared environments.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Oct 20, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-427407.8In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead tCVE-2023-427415.5In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead tCVE-2023-427425.5In sysui, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges nCVE-2023-427437.8In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executCVE-2023-427445.5In telecom service, there is a possible missing permission check. This could lead to local denial of service with no additional execution prCVE-2023-427457.8In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executCVE-2023-427467.8In power manager, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executioCVE-2023-427477.8In camera service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executiCVE-2023-427487.8In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executCVE-2023-427495.5In enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lCVE-2023-427504.4In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SystCVE-2023-427514.4In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with Syst
CVE-2023-4274: Medium severity, CVSS 6.5 | Vulnix