CVE-2026-1357 WPvivid File Upload via Crypto Fail-Open

CVE-2026-1357 is a critical-severity vulnerability. AttackerView checks WordPress sites for it with a live exploit check.

Is my site vulnerable to CVE-2026-1357?

Exploits a cryptographic fail-open in the WPvivid Backup & Migration plugin's backup transfer feature. When RSA decryption fails, the plugin falls back to a null AES key, allowing an attacker to encrypt a payload with that null key and upload arbitrary files via path traversal. We upload a harmless canary file to prove the flaw exists.