Path Traversal in WPvivid Backup Plugin

Executive Summary

This vulnerability affects the WPvivid Backup & Migration WordPress plugin before version 0.9.134. It allows authenticated administrators to write files to arbitrary locations on the server outside the intended backup directory due to improper validation of user-supplied file names. This can lead to path traversal attacks where existing files are overwritten or new files are placed in unintended directories.

Useful 0 Not Useful 0

Detection Guidance

Check if the WPvivid Backup & Migration plugin version is below 0.9.134. Inspect server logs for unusual file write operations or path traversal attempts in WordPress directories. Look for files created outside the backup directory by administrators.

Useful 0 Not Useful 0

Impact Analysis

An attacker with administrator access could exploit this to overwrite critical files on the server, such as configuration files or system binaries, potentially causing service disruption or unauthorized code execution. It may also allow placement of malicious files in sensitive directories.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized file access or modification, potentially violating data integrity and confidentiality requirements under GDPR and HIPAA. Unauthorized file overwrites might expose or alter sensitive data, leading to compliance breaches.

Useful 0 Not Useful 0

Mitigation Strategies

Update the WPvivid Backup & Migration plugin to version 0.9.134 or later immediately. Remove unnecessary administrative access to the plugin. Monitor file system changes and restrict write permissions to critical directories.

Useful 0 Not Useful 0