SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-82182

MEDIUM · CVSS 4.1 EPSS 0.19%

Source: NVD + CISA KEV + EPSS · Published 2026-09-02 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The WPvivid Backup, Migration & Staging plugin for WordPress versions prior to 0.9.133 is vulnerable to SQL injection due to inadequate sanitization of user-supplied identifiers in SQL queries. This flaw could allow attackers with administrative access to manipulate database queries, potentially leading to data exposure or corruption. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk of exploitation.

CVE
CVE-2026-82182
Severity
MEDIUM
CVSS
4.1
EPSS
0.19%
WordPress

Original NVD Description

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not sanitise a user supplied list of identifiers before using it in a SQL query, allowing administrators to perform SQL injection attacks.