PT-2025-15093 · Wpvividplugins · Migration+1

Chokri Hammedi · Published 2025-04-06 · Updated 2025-12-21 · CVE-2025-12654

Positive Technologies (AI Summary)

CVSS v3.1

2.7

Low

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions AnyDesk (affected versions not specified)

Description The issue concerns a remote code execution (RCE) exploit. Technical details include the use of a vxproj file, conversion to vbs and then to ps1 (PowerShell script), and involvement of an asar file. A specific 7z archive named SearchFilter.7z is mentioned, which is downloaded from a release by Rathod536/Fidelity-Power-BI-project. The final asar file has a hash of bcca9de329754c6719b4829919dcb0603f8a5c29a36ab83f9d88a5aa2d00e2d6.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2025-12654

Affected Products

Migration

Wpvivid — Backup

References · 18

• https://nvd.nist.gov/vuln/detail/CVE-2025-12654 · Security Note
• https://github.com/sophoslabs/IoCs · Note
• https://github.com/mazipan/auto-commit · Note
• https://wordpress.org/plugins/wpvivid-backuprestore · Note
• https://t.me/CVEtracker/40361 · Telegram Post
• https://twitter.com/akaclandestine/status/1917953172905275870 · Twitter Post
• https://t.me/aptreports/19206 · Telegram Post
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3397673%40wpvivid-backuprestore&new=3397673%40wpvivid-backuprestore&sfp_email=&sfph_mail= · Note
• https://plugins.trac.wordpress.org/browser/wpvivid-backuprestore/tags/0.9.120/includes/staging/class-wpvivid-staging.php#L1535 · Note
• https://t.me/cybersecuritytechnologies/12011 · Telegram Post
• https://t.me/secu_001/575 · Telegram Post
• https://twitter.com/attritionorg/status/1989755245053034596 · Twitter Post
• https://plugins.trac.wordpress.org/browser/wpvivid-backuprestore/tags/0.9.120/includes/staging/class-wpvivid-staging.php#L1568 · Note
• https://plugins.trac.wordpress.org/browser/wpvivid-backuprestore/tags/0.9.120/includes/staging/class-wpvivid-staging.php#L1571 · Note
• https://twitter.com/eversinc33/status/1927378892207104110 · Twitter Post