CVE-2026-82182

Name of the Vulnerable Software and Affected Versions WPvivid — Backup, Migration & Staging WordPress plugin versions prior to 0.9.133

Description Administrators can perform SQL injection attacks because the plugin fails to sanitize a user-supplied list of identifiers before incorporating them into a SQL query. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to or manipulation of the database.

Recommendations Update the plugin to version 0.9.133 or later.