WordPress plugin with 900k installs vulnerable to critical RCE flaw
From BleepingComputer to All on Thu Feb 12 14:55:26 2026
A critical vulnerability in the WPvivid Backup & Migration plug;n for WordPress, installed on more than 900,000 websites, can be exploited to achieve remote code execution by uploading arbitrary files without authentication. [...]