What is CVE-2024-1982?

A recently discovered vulnerability, CVE-2024-1982, poses a medium severity risk to certain WordPress websites. This vulnerability affects the Migration, Backup, Staging – WPvivid plugin for WordPress, specifically in versions up to and including 0.9.68.

Who is impacted by this?

This issue can potentially lead to unauthorized access, SQL injection attacks, or denial of service. If you're using the affected plugin, it's important to be aware of the risks and take appropriate measures to protect your website and data.

What should I do if I’m affected?

If your website is affected by the CVE-2024-1982 vulnerability, it's crucial to take action to protect your data and system. Follow these simple steps:

1. Upgrade the WPvivid Backup and Migration plugin to version 0.9.69 or higher.

2. Regularly check for and apply updates to keep the plugin secure.

3. Monitor your website for signs of unauthorized access or suspicious activity.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2024-1982 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-284, which involves insufficient access control, potentially leading to unauthorized access, SQL injection, or denial of service.

Learn More

For a comprehensive understanding of this vulnerability, its severity, and mitigation strategies, refer to the NVD page and the resources listed below.

• HiSolutions Research

• Wordfence Threat Intel

• CVE Record