Lucene search
K

58 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:44 a.m.6 views

CVE-2022-0444

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin before 4.3.6 does not have authorisation and CSRF checks when resetting its settings, allowing unauthenticated attackers to reset them, including generating a new backup encryption key...

4.3CVSS6.9AI score0.00096EPSS
Exploits2References1
Patchstack
Patchstack
added 2025/12/31 12:0 a.m.4 views

WordPress XCloner plugin <= 4.8.2 - Cross-Site Request Forgery in Xcloner_Remote_Storage:save() vulnerability

Cross-Site Request Forgery in XclonerRemoteStorage:save vulnerability discovered by Rafshanzani Suhada in WordPress Plugin XCloner versions = 4.8.2...

4.3CVSS5.9AI score0.00013EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/06 2:53 a.m.1 views

CVE-2025-11759

The Backup, Restore and Migrate your sites with XCloner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.8.2. This is due to missing or incorrect nonce validation on the XclonerRemoteStorage:save function. This makes it possible for...

4.3CVSS5.3AI score0.00013EPSS
Exploits0References1
NVD
NVD
added 2025/12/05 3:15 a.m.2 views

CVE-2025-11759

The Backup, Restore and Migrate your sites with XCloner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.8.2. This is due to missing or incorrect nonce validation on the XclonerRemoteStorage:save function. This makes it possible for...

4.3CVSS0.00013EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/05 1:55 a.m.22 views

CVE-2025-11759 Backup, Restore and Migrate your sites with XCloner <= 4.8.2 - Cross-Site Request Forgery in Xcloner_Remote_Storage:save()

The Backup, Restore and Migrate your sites with XCloner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.8.2. This is due to missing or incorrect nonce validation on the XclonerRemoteStorage:save function. This makes it possible for...

4.3CVSS0.00013EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/05 12:0 a.m.2 views

PT-2025-49185

The Backup, Restore and Migrate your sites with XCloner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.8.2. This is due to missing or incorrect nonce validation on the Xcloner Remote Storage:save function. This makes it possible for...

4.3CVSS5.3AI score0.00013EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-4359

Malware in sbrugna...

6.5CVSS6.3AI score0.01457EPSS
Exploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-8443

Malware in sbrugna...

4CVSS6.3AI score0.07264EPSS
Exploits2References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-8440

Malware in sbrugna...

6.5CVSS6.3AI score0.06193EPSS
Exploits2References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2014-2377

Malware in sbrugna...

6.8CVSS6.1AI score0.01436EPSS
Exploits5References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2014-8442

Malware in sbrugna...

5CVSS6.3AI score0.07668EPSS
Exploits2References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-8441

Malware in sbrugna...

5CVSS6.3AI score0.08404EPSS
Exploits2References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-4361

Malware in sbrugna...

6.5CVSS6.3AI score0.00518EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-4360

Malware in sbrugna...

3.5CVSS6.3AI score0.00179EPSS
Exploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2014-8444

Malware in sbrugna...

2.1CVSS6.3AI score0.00203EPSS
Exploits2References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-15583

Malicious code in bioql PyPI...

4.3CVSS4.8AI score0.00096EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-47632

Malicious code in bioql PyPI...

5.3CVSS6.5AI score0.00485EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 8:3 a.m.4 views

CVE-2024-6559

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 4.7.3. This is due the plugin utilizing sabre without preventing direct access to the files. This makes it possible for...

5.3CVSS6.5AI score0.00485EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/16 6:43 a.m.11 views

CVE-2024-6559 XCloner <= 4.7.3 - Unauthenticated Full Path Disclosure

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 4.7.3. This is due the plugin utilizing sabre without preventing direct access to the files. This makes it possible for...

5.3CVSS6.5AI score0.00485EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/07/16 6:43 a.m.13 views

CVE-2024-6559 XCloner <= 4.7.3 - Unauthenticated Full Path Disclosure

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 4.7.3. This is due the plugin utilizing sabre without preventing direct access to the files. This makes it possible for...

5.3CVSS0.00485EPSS
Exploits0References2
Rows per page
Query Builder