CVE-2023-41243

HIGH

Improper Privilege Management vulnerability in WPvivid Team WPvivid Backup and Migration allows Privilege Escalation.This issue affects WPvivid Backup and Migration: from n/a through 0.9.90.

Affects 1 product across 1 vendor.

CVSS 3.18.8
EPSS0.7%
Percentile53th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-269: Improper Privilege Management

Software does not properly assign, modify, track, or check privileges, allowing unauthorized elevation of access.

CWE-862: Missing Authorization

Software does not check whether an authenticated actor has permission for the requested operation.

Related Attack Patterns (CAPEC)
CAPEC-58 Restful Privilege Elevation
via CWE-269
CAPEC-665 Exploitation of Thunderbolt Protection Flaws
via CWE-862
CAPEC-122 Privilege Abuse
via CWE-269
CAPEC-233 Privilege Escalation
via CWE-269

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

Improper Privilege Management vulnerability in WPvivid Team WPvivid Backup and Migration allows Privilege Escalation, affecting versions from n/a through 0.9.90.

BSID: BS-2024-GLOBAL-049483-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2023-41243?
Improper Privilege Management vulnerability in WPvivid Team WPvivid Backup and Migration allows Privilege Escalation, affecting versions from n/a through 0.9.90.
What is the CVSS score for CVE-2023-41243?
CVE-2023-41243 has CVSS 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.7%.
Is CVE-2023-41243 actively exploited?
No confirmed active exploitation of CVE-2023-41243 as of 2026-05-30.
How do I remediate CVE-2023-41243?
Priority: IMMEDIATE.
What systems are affected by CVE-2023-41243?
CVE-2023-41243 affects Wpvivid Migration, Backup, Staging.
Vulnerability Details
CVE IDCVE-2023-41243
BSIDBS-2024-GLOBAL-049483-H BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published2024-05-17
Last Modified2025-04-10
ICS Relevance15%
Weakness (CWE)
Improper Privilege ManagementMissing Authorization
SourceNVD
Official Description

Improper Privilege Management vulnerability in WPvivid Team WPvivid Backup and Migration allows Privilege Escalation.This issue affects WPvivid Backup and Migration: from n/a through 0.9.90.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker with low privileges can exploit this vulnerability to escalate their privileges, potentially gaining full administrative access to the system.

Exploitation Likelihood: HIGH

Affected Products
VendorProductAffected Versions
Wpvivid Migration, Backup, Staging < 0.9.91
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 882 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hashaa2549a644918e4d48decd11cc44b2c21ae2d85eae5dde18b44a9b5a8781e0d1e962ccb879d752bdd789fb756de87c9f8d9cb8cc28e025706c1b6dd36040f14c
Related CVEs affecting Wpvivid
CVE-2026-1357 9.8 The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPr... CVE-2024-56273 9.8 Missing Authorization vulnerability in wpvividplugins WPvivid Backup and Migr... CVE-2023-5576 9.3 The Migration, Backup, Staging - WPvivid plugin for WordPress is vulnerable t... CVE-2024-1981 9.1 The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable t... CVE-2024-1982 9.1 The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable t...
View all Wpvivid CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →