Get all your news in one place.
100's of premium titles.
One app.
Start reading
TechRadar
TechRadar
Sead Fadilpašić

Nearly a million WordPress websites could be at risk from this serious plugin security flaw

WordPress logo on mobile.

  • WPvivid Backup & Migration plugin vulnerable to critical RCE flaw CVE-2026-1357
  • Exploitation requires “receive backup from another site” option enabled, with 24-hour attack window
  • Patch released in version 0.9.123 (Jan 28); users urged to upgrade immediately
Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.