Xcloner
11 CVEs across 1 Xcloner products. Browse Xcloner vulnerabilities, severities, and proof-of-concept exploits.
Xcloner products with known CVEs
Xcloner CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2020-35950 | Critical | 9.8 | 2021-01-01 | An issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress. It allows CSRF (via almost any endpoint). |
CVE-2020-35948 | Critical | 9.9 | 2021-01-01 | An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary f… |
CVE-2020-13424 | Medium | 6.5 | 2020-05-23 | The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure. |
CVE-2015-4338 | | | 2015-06-17 | Static code injection vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary PHP code into the language… |
CVE-2015-4337 | | | 2015-06-17 | Cross-site scripting (XSS) vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via… |
CVE-2015-4336 | | | 2015-06-17 | cloner.functions.php in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to execute arbitrary commands via a file containing filenames… |
CVE-2014-8607 | | | 2015-06-10 | The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! provides the MySQL username and password on the command line, which allows local users to obtain s… |
CVE-2014-8606 | | | 2015-06-10 | Directory traversal vulnerability in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administrators to read arbitrary files via a… |
CVE-2014-8605 | | | 2015-06-10 | The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! stores database backup files with predictable names under the web root with insufficient access co… |
CVE-2014-8604 | | | 2015-06-10 | The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! returns the MySQL password in cleartext to a text box in the configuration panel, which allows rem… |
CVE-2014-8603 | | | 2015-06-10 | cloner.functions.php in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administrators to execute arbitrary code via shell metachara… |
CVE-2014-2996 | | | 2014-04-25 | XCloner Standalone 3.5 and earlier, when enable_db_backup and sql_mem are enabled, allows remote authenticated administrators to execute arbitrary commands via… |
CVE-2014-2579 | | | 2014-04-25 | Multiple cross-site request forgery (CSRF) vulnerabilities in XCloner Standalone 3.5 and earlier allow remote attackers to hijack the authentication of adminis… |
CVE-2014-2340 | | | 2014-04-03 | Cross-site request forgery (CSRF) vulnerability in the XCloner plugin before 3.1.1 for WordPress allows remote attackers to hijack the authentication of admini… |