Access violation vulnerability in Migration, Backup, Staging – WPvivid 0.9.91

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 0.9.91. This vulnerability exposes the Google Drive API secrets stored in plaintext in the publicly visible plugin source. This means that unauthenticated attackers can gain access to the WPVivid Google Drive account through the API if they can trick a user into reauthenticating with another vulnerability or by using social engineering to get the user to provide their credentials.