Xcloner

14 CVEs across 1 Xcloner products. Browse Xcloner vulnerabilities, severities, and proof-of-concept exploits.

Xcloner products with known CVEs

ProductCVEs
Xcloner14
Xcloner CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2020-35950Critical9.82021-01-01An issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress. It allows CSRF (via almost any endpoint).
CVE-2020-35948Critical9.92021-01-01An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary f…
CVE-2020-13424Medium6.52020-05-23The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure.
CVE-2015-43382015-06-17Static code injection vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary PHP code into the language…
CVE-2015-43372015-06-17Cross-site scripting (XSS) vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via…
CVE-2015-43362015-06-17cloner.functions.php in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to execute arbitrary commands via a file containing filenames…
CVE-2014-86072015-06-10The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! provides the MySQL username and password on the command line, which allows local users to obtain s…
CVE-2014-86062015-06-10Directory traversal vulnerability in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administrators to read arbitrary files via a…
CVE-2014-86052015-06-10The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! stores database backup files with predictable names under the web root with insufficient access co…
CVE-2014-86042015-06-10The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! returns the MySQL password in cleartext to a text box in the configuration panel, which allows rem…
CVE-2014-86032015-06-10cloner.functions.php in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administrators to execute arbitrary code via shell metachara…
CVE-2014-29962014-04-25XCloner Standalone 3.5 and earlier, when enable_db_backup and sql_mem are enabled, allows remote authenticated administrators to execute arbitrary commands via…
CVE-2014-25792014-04-25Multiple cross-site request forgery (CSRF) vulnerabilities in XCloner Standalone 3.5 and earlier allow remote attackers to hijack the authentication of adminis…
CVE-2014-23402014-04-03Cross-site request forgery (CSRF) vulnerability in the XCloner plugin before 3.1.1 for WordPress allows remote attackers to hijack the authentication of admini…