> WordPress plugin with 900k installs vulnerable to critical RCE flaw
[AUTHOR: Bill Toulas]
[DATE: 12/02/2026 17:09]
[LANGUAGE: EN]
A critical vulnerability in the WPvivid Backup & Migration plugin for WordPress, installed on more than 900,000 websites, can be exploited to achieve remote code execution by uploading arbitrary files without authentication. [...]