CVE-2024-56273

CRITICAL

Missing Authorization vulnerability in wpvividplugins WPvivid Backup and Migration wpvivid-backuprestore allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPvivid B...

Affects 1 product across 1 vendor.

CVSS 3.19.8
EPSS0.4%
Percentile33th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-862: Missing Authorization

Software does not check whether an authenticated actor has permission for the requested operation.

Related Attack Patterns (CAPEC)
CAPEC-665 Exploitation of Thunderbolt Protection Flaws
via CWE-862

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A Missing Authorization vulnerability in wpvividplugins WPvivid Backup and Migration wpvivid-backuprestore allows unauthorized access to functionality not properly constrained by Access Control Lists (ACLs). This issue affects versions from n/a through <= 0.9.106.

BSID: BS-2025-GLOBAL-044090-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2024-56273?
A Missing Authorization vulnerability in wpvividplugins WPvivid Backup and Migration wpvivid-backuprestore allows unauthorized access to functionality not properly constrained by Access Control Lists (ACLs). This issue affects versions from n/a through <= 0.9.106.
What is the CVSS score for CVE-2024-56273?
CVE-2024-56273 has CVSS 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.4%.
Is CVE-2024-56273 actively exploited?
No confirmed active exploitation of CVE-2024-56273 as of 2026-09-25.
How do I remediate CVE-2024-56273?
Priority: IMMEDIATE.
What systems are affected by CVE-2024-56273?
CVE-2024-56273 affects Wpvivid Migration, Backup, Staging.
Vulnerability Details
CVE IDCVE-2024-56273
BSIDBS-2025-GLOBAL-044090-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2025-01-07
Last Modified2026-06-17
ICS Relevance15%
Weakness (CWE)
Missing Authorization
SourceNVD
Official Description

Missing Authorization vulnerability in wpvividplugins WPvivid Backup and Migration wpvivid-backuprestore allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPvivid Backup and Migration: from n/a through <= 0.9.106.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker can exploit this vulnerability to access and potentially manipulate backup and migration functionalities without proper authorization, leading to unauthorized data access or manipulation.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductAffected Versions
Wpvivid Migration, Backup, Staging < 0.9.107
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 646 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash633b575efc645899463e7a0ccae1cd4b63f011a671ccd131a91da92a1b1a09b1186575c61dbd0220489dac20eef39fa6cdeed1e2c08e0b87804927da887a4a6a
Related CVEs affecting Wpvivid
CVE-2026-1357 9.8 The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPr... CVE-2023-5576 9.3 The Migration, Backup, Staging - WPvivid plugin for WordPress is vulnerable t... CVE-2024-1981 9.1 The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable t... CVE-2024-1982 9.1 The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable t... CVE-2023-41243 8.8 Improper Privilege Management vulnerability in WPvivid Team WPvivid Backup an...
View all Wpvivid CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →