WPvivid Backup for MainWP
WPvivid Backup for MainWP has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 3 are fixed as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 6.1 out of 10. 2024 was the busiest year with 3 disclosures.
The most common weakness is Cross-Site Scripting, behind 3 of the records (100%).
Every one of the 3 issues recorded for WPvivid Backup for MainWP has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. WPvivid Backup for MainWP is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2024-35664WPvivid Backup for MainWP <= 0.9.32 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

WPvivid Backup for MainWP
Author
wpvividplugins
WPvivid Backup for MainWP enables you to create and download backups of a specific child site, set backup schedules, set WPvivid Backup Plugin settings for all of your child sites directly from your MainWP dashboard. WPvivid Backup Pro Supported The extension now also supports WPvivid Backup Pro: Install, claim and update WPvivid Backup Pro for child site in bulk. Set up remote storage for child sites in bulk. Install WPvivid Image Optimization Plugin in child sites in bulk. Features Create backups for a specific child site Download backups of a specific child site to local Set backup schedules for child sites Set WPvivid Backup Free and Pro settings for child sites Set up remote storage for child sites with WPvivid Backup Pro Install, claim and update WPvivid Backup Pro for child sites Set up incremental backups for child sites Set up white label for child sites Select and hide WPvivid modules on child sites Minimum Requirements MainWP Dashboard 4.0.3 or later MainWP Child Requirement: 4.0.2 or later Installation and Setup See the get started guide. Note: Install WPVivid Backup for MainWP on MainWP site ONLY. Install WPVivid Backup Plugin (not MainWP) on each child site.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C