CVE-2023-5576 - CVE House
Back to Database
Status published High CVE-2023-5576

Migration, Backup, Staging – WPvivid <= 0.9.91 - Google Drive Client Secret Exposure

Vulnerability Description

The Migration, Backup, Staging - WPvivid plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 0.9.91 via Google Drive API secrets stored in plaintext in the publicly visible plugin source. This could allow unauthenticated attackers to impersonate the WPVivid Google Drive account via the API if they can trick a user into reauthenticating via another vulnerability or social engineering.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-5576

Credits & Attribution

No credits recorded in the NVD database.

References

More from wpvividplugins

View All →
CVE-2025-5961
Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload
High 7.2
CVE-2025-12656
Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletion
Low 3.8
CVE-2025-12654
Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation
Low 2.7
CVE-2024-56273
WordPress WPvivid Backup plugin <= 0.9.106 - Broken Access Control vulnerability
Medium 4.3
CVE-2024-3054
WPvivid Backup & Migration Plugin <= 0.9.99 - Authenticated (Admin+) PHAR Deserialization
High 7.2

Affected Vendor

wpvividplugins

View all reports →

Affected Software

WPvivid — Backup, Migration & Staging
Vulnerable Versions:
0

Timeline

Official Publish: October 20th, 2023
Last Modified: April 8th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

Weaknesses (CWE)

CWE-200

MITRE ATT&CK TTPs

T1213 Data from Information Repositories
Collection
T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1041 Exfiltration Over C2 Channel
Exfiltration