Approved changes feed: RSS · Atom
cpe:2.3:a:xcloner:xcloner:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Xcloner (d4ae64e4-6de5-53ce-aa5e-b2f656d1f5ad) |
|---|---|
| Product | Xcloner (0f7a6d79-7b62-5755-bf8c-7daa3ed82c48) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/watchfulli/xcloner-wordpress |
purl2cpe | 2026-06-01 10:13:07.372281 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-35950 |
vulnerable | 2026-06-08 05:25:02.376928 |
Details available
CRITICAL (9.8)
An issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress. It allows CSRF (via almost any endpoint).
Published: 2021-01-01T03:27:16.000Z
Updated: 2024-08-04T17:16:13.468Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35948 |
vulnerable | 2026-06-08 05:25:02.374528 |
Details available
CRITICAL (9.9)
An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary files, including PHP files. Doing so would allow an attacker to achieve remote code execution. The xcloner_restore.php write_file_action could overwrite wp-config.php, for example. Alternatively, an attacker could create an exploit chain to obtain a database dump.
Published: 2021-01-01T03:27:47.000Z
Updated: 2024-08-04T17:16:13.477Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2340 |
vulnerable | 2026-06-08 05:05:28.510270 |
Details available
Cross-site request forgery (CSRF) vulnerability in the XCloner plugin before 3.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that create website backups via a request to wp-admin/plugins.php.
Published: 2014-04-03T15:00:00.000Z
Updated: 2024-08-06T10:14:25.304Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.