CVE-2020-35950

2021-01-0104:15:13

Google

osv.dev

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.4%

JSON

An issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress. It allows CSRF (via almost any endpoint).

CPENameOperatorVersion
xcloner-wordpresseq4.2.4
xcloner-wordpresseq4.1.34
xcloner-wordpressequntagged-0681671b0a71d1a1d73e
xcloner-wordpresseq4.2.3
xcloner-wordpresseq4.2.10
xcloner-wordpresseq4.1.3
xcloner-wordpresseq4.0.6
xcloner-wordpresseq4.2.0
xcloner-wordpresseq4.2.150
xcloner-wordpresseq4.2.2

Name	Operator	Version
xcloner-wordpress	eq	4.2.4
xcloner-wordpress	eq	4.1.34
xcloner-wordpress	eq	untagged-0681671b0a71d1a1d73e
xcloner-wordpress	eq	4.2.3
xcloner-wordpress	eq	4.2.10
xcloner-wordpress	eq	4.1.3
xcloner-wordpress	eq	4.0.6
xcloner-wordpress	eq	4.2.0
xcloner-wordpress	eq	4.2.150
xcloner-wordpress	eq	4.2.2