
- WPvivid Backup & Migration plugin vulnerable to critical RCE flaw CVE-2026-1357
- Exploitation requires “receive backup from another site” option enabled, with 24-hour attack window
- Patch released in version 0.9.123 (Jan 28); users urged to upgrade immediately