CVE-2022-2863

The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the content of a file, allowing high privilege users to read any file from the web server via a Traversal attack

• CWE-22

• http://packetstormsecurity.com/files/168616/WordPress-WPvivid-Backup-Path-Traversal.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2022/Oct/0Exploit, Mailing List, Third Party Advisory
• https://wpscan.com/vulnerability/cb6a3304-2166-47a0-a011-4dcacaa133e5Exploit, Patch, Third Party Advisory
• http://packetstormsecurity.com/files/168616/WordPress-WPvivid-Backup-Path-Traversal.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2022/Oct/0Exploit, Mailing List, Third Party Advisory
• https://wpscan.com/vulnerability/cb6a3304-2166-47a0-a011-4dcacaa133e5Exploit, Patch, Third Party Advisory

Published

Sep 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-28624A potential security vulnerability has been identified in ce…4.8
• CVE-2022-28625A local disclosure of sensitive information vulnerability wa…5.5
• CVE-2022-28626A local arbitrary code execution vulnerability was discovere…6.7
• CVE-2022-28627A local arbitrary code execution vulnerability was discovere…8.4
• CVE-2022-28628A local arbitrary code execution vulnerability was discovere…8.4
• CVE-2022-28629A local arbitrary code execution vulnerability was discovere…7.8
• CVE-2022-28630A local arbitrary code execution vulnerability was discovere…7.3
• CVE-2022-28631A potential arbitrary code execution and a denial of service…8.8
• CVE-2022-28632A potential arbitrary code execution and a denial of service…8.8
• CVE-2022-28633A local disclosure of sensitive information and a local unau…7.3
• CVE-2022-28634A local arbitrary code execution vulnerability was discovere…6.7
• CVE-2022-28635A potential local arbitrary code execution and a local denia…7.4