CVE-2024-35664

MEDIUM 6.1CVE-2024-35664 · Published 04/06/2024 · updated 17/06/2026

In short

CVE-2024-35664 is a MEDIUM (CVSS 6.1) vulnerability affecting wpvivid backup for mainwp (wpvivid).
Chance of exploitation in the next 30 days (EPSS): 0.26%, higher than 17.3% of all vulnerabilities.
Fix: update to 0.9.33 or later.

Package	Affected versions	Patched versions
wpvivid backup for mainwp wpvivid	`< 0.9.33`	`0.9.33`

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpvividplugins WPvivid Backup for MainWP wpvivid-backup-mainwp allows Reflected XSS.This issue affects WPvivid Backup for MainWP: from n/a through <= 0.9.32.

References

patchstack.com/database/Wordpress/Plugin/wpvivid-backup-mainwp/vulnerability/wordpress-wpvivid-backup-for-mainwp-plugin-0-9-32-reflected-cross-site-scripting-xss-vulnerability
patchstack.com/database/vulnerability/wpvivid-backup-mainw/wordpress-wpvivid-backup-for-mainwp-plugin-0-9-32-reflected-cross-site-scripting-xss-vulnerability · Third Party Advisory

More vulnerabilities in wpvivid backup for mainwp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free