CVE-2022-0444

XCloner < 4.3.6 - Plugin Settings Reset

published June 27, 2022

CVSS
—
EPSS
0%
Percentile
20.9
In the wild
Unconfirmed
What it is

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin before 4.3.6 does not have authorisation and CSRF checks when resetting its settings, allowing unauthenticated attackers to reset them, including generating a new backup encryption key.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00294 · 20.9th percentile
Published
2022-06-27T08:55Z
EPSS history
Timeline
  • 27 JUN 08:55Z
    XCloner < 4.3.6 - Plugin Settings Reset
    cvelistv5