Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-36842

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the wpvivid_upload_import_files and wpvivid_upload_files AJAX actions that allows low-level authenticated attackers to upload zip files that can be subsequently extracted. This affects versions up to, and including 0.9.35.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.239
EPSS Ranking 95.7%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2020-36842
  • None » None » Version:
    _backup
  • None » None » Version:
    _staging:-
  • None » None » Version:
    _staging:0.9.1
  • None » None » Version:
    _staging:0.9.10
  • None » None » Version:
    _staging:0.9.11
  • None » None » Version:
    _staging:0.9.12
  • None » None » Version:
    _staging:0.9.13
  • None » None » Version:
    _staging:0.9.14
  • None » None » Version:
    _staging:0.9.15
  • None » None » Version:
    _staging:0.9.16
  • None » None » Version:
    _staging:0.9.17
  • None » None » Version:
    _staging:0.9.18
  • None » None » Version:
    _staging:0.9.19
  • None » None » Version:
    _staging:0.9.2
  • None » None » Version:
    _staging:0.9.20
  • None » None » Version:
    _staging:0.9.21
  • None » None » Version:
    _staging:0.9.22
  • None » None » Version:
    _staging:0.9.23
  • None » None » Version:
    _staging:0.9.24
  • None » None » Version:
    _staging:0.9.25
  • None » None » Version:
    _staging:0.9.26
  • None » None » Version:
    _staging:0.9.27
  • None » None » Version:
    _staging:0.9.28
  • None » None » Version:
    _staging:0.9.29
  • None » None » Version:
    _staging:0.9.3
  • None » None » Version:
    _staging:0.9.30
  • None » None » Version:
    _staging:0.9.31
  • None » None » Version:
    _staging:0.9.32
  • None » None » Version:
    _staging:0.9.33
  • None » None » Version:
    _staging:0.9.34
  • None » None » Version:
    _staging:0.9.35
  • None » None » Version:
    _staging:0.9.4
  • None » None » Version:
    _staging:0.9.5
  • None » None » Version:
    _staging:0.9.6
  • None » None » Version:
    _staging:0.9.7
  • None » None » Version:
    _staging:0.9.8
  • None » None » Version:
    _staging:0.9.9
  • Wpvivid » Migration » Version: Any
    cpe:2.3:a:wpvivid:migration


Products
Pricing
Contact Us

Shodan ® - All rights reserved