WPvivid Backup & Migration <0.9.123 - Unauthenticated RCE
Title source: llmExploitation Summary
CVE-2026-1357 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 13 public exploits from researchers including XiaomingX, cybertechajju, adminlove520. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional SQL injection exploit for CVE-2025-10042, targeting WordPress Quiz Maker plugin versions <= 6.7.0.56. The exploit uses time-based blind SQLi to extract admin credentials and hashes.
Description
The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. This is due to improper error handling in the RSA decryption process combined with a lack of path sanitization when writing uploaded files. When the plugin fails to decrypt a session key using openssl_private_decrypt(), it does not terminate execution and instead passes the boolean false value to the phpseclib library's AES cipher initialization. The library treats this false value as a string of null bytes, allowing an attacker to encrypt a malicious payload using a predictable null-byte key. Additionally, the plugin accepts filenames from the decrypted payload without sanitization, enabling directory traversal to escape the protected backup directory. This makes it possible for unauthenticated attackers to upload arbitrary PHP files to publicly accessible directories and achieve Remote Code Execution via the wpvivid_action=send_to_site parameter.
Exploits (13)
This repository contains a functional SQL injection exploit for CVE-2025-10042, targeting WordPress Quiz Maker plugin versions <= 6.7.0.56. The exploit uses time-based blind SQLi to extract admin credentials and hashes.
This repository contains a functional exploit for CVE-2026-1357, an unauthenticated RCE vulnerability in WPvivid Backup & Migration. The exploit chains a crypto fail-open bug with path traversal to upload a malicious file, demonstrating the vulnerability with post-exploitation capabilities.
This repository contains a functional exploit for CVE-2026-1357, targeting the WPvivid Backup & Migration plugin for WordPress. The exploit leverages improper error handling in RSA decryption and lack of path sanitization to achieve unauthenticated arbitrary file upload, leading to remote code execution.
This repository contains a functional exploit for CVE-2026-1357, targeting an unauthenticated arbitrary file upload vulnerability in WPvivid Backup & Migration plugin (≤ 0.9.123). The exploit leverages a cryptographic fail-open (null AES key) and path traversal to achieve remote code execution (RCE).
This repository contains a functional exploit for CVE-2026-1357, an unauthenticated arbitrary file upload vulnerability in WPvivid Backup & Migration plugin (versions <= 0.9.123). The exploit leverages a cryptographic fail-open flaw combined with path traversal to achieve remote code execution.
This repository contains a functional exploit for CVE-2026-1357, targeting a vulnerability in the WPvivid Backup plugin. The exploit leverages a null byte key decryption flaw and directory traversal to upload a malicious PHP webshell, achieving remote code execution (RCE).
This repository contains a functional exploit for CVE-2026-1357, targeting WPvivid Backup & Migration plugin (≤ 0.9.123). The exploit leverages a cryptographic fail-open (null AES key) combined with path traversal to achieve unauthenticated arbitrary file upload, leading to RCE.
This repository contains a functional exploit for CVE-2026-1357, targeting the WPvivid Backup & Migration plugin for WordPress. The exploit leverages improper error handling in RSA decryption and lack of path sanitization to achieve unauthenticated arbitrary file upload, leading to remote code execution.
This repository provides a detailed technical analysis of CVE-2026-1357, an unauthenticated RCE vulnerability in the WPvivid Backup & Migration WordPress plugin. It includes root cause analysis, patch details, and mitigation steps.
This repository provides a detailed technical analysis of CVE-2026-1357, an unauthenticated RCE vulnerability in the WPvivid Backup & Migration WordPress plugin. It includes root cause analysis, patch details, and mitigation steps.
This repository contains a functional exploit for CVE-2026-1357, targeting a vulnerability in WPvivid Backup Plugin. The exploit generates a malicious payload using AES encryption with a null key and sends it to the target, allowing arbitrary file write and potential remote code execution.
This repository contains a functional exploit for CVE-2026-1357, targeting a cryptographic failure and directory traversal in the WPvivid WordPress plugin to achieve unauthenticated RCE via file upload. The PoC includes a Docker-based lab environment and a Python script that crafts a malicious payload to bypass authentication and upload a PHP shell.
This repository contains a functional exploit PoC for CVE-2026-1357, targeting an unauthenticated RCE vulnerability in WPvivid Backup & Migration plugin versions ≤ 0.9.123. The exploit uploads a malicious payload via the 'send_to_site' action and achieves remote code execution through a webshell.
Nuclei Templates (1)
http.component:"WordPress"
body="wp-content/plugins/wpvivid-backuprestore"
References (8)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H