EUVD-2022-15583

Malicious code in bioql PyPI...

CVE-2024-6559

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 4.7.3. This is due the plugin utilizing sabre without preventing direct access to the files. This makes it possible for...

CVE-2024-6559

CVE-2024-6559 refers to XCloner Backup, Restore and Migrate for WordPress. The vulnerability is a Full Path Disclosure in all versions up to 4.7.3 caused by sabre access not being restricted, enabling unauthenticated retrieval of the web app’s full path. The exposed path can aid subsequent attack...

CVE-2024-6559 XCloner <= 4.7.3 - Unauthenticated Full Path Disclosure

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 4.7.3. This is due the plugin utilizing sabre without preventing direct access to the files. This makes it possible for...

CVE-2024-6559 XCloner <= 4.7.3 - Unauthenticated Full Path Disclosure

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 4.7.3. This is due the plugin utilizing sabre without preventing direct access to the files. This makes it possible for...

WordPress XCloner plugin <= 4.7.3 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin XCloner versions = 4.7.3...

PT-2024-37716 · WordPress · Xcloner Plugin

Name of the Vulnerable Software and Affected Versions: XCloner Plugin versions up to, and including, 4.7.3 Description: The XCloner Plugin for WordPress is vulnerable to Full Path Disclosure due to its utilization of sabre without preventing direct access to the files. This allows unauthenticated...

CVE-2022-0444

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin before 4.3.6 does not have authorisation and CSRF checks when resetting its settings, allowing unauthenticated attackers to reset them, including generating a new backup encryption key...

CVE-2022-0444

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin before 4.3.6 does not have authorisation and CSRF checks when resetting its settings, allowing unauthenticated attackers to reset them, including generating a new backup encryption key...

Cross site request forgery (csrf)

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin before 4.3.6 does not have authorisation and CSRF checks when resetting its settings, allowing unauthenticated attackers to reset them, including generating a new backup encryption key...

WordPress plugin XCloner 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. versions of the WordPress XCloner plugin prior to 4.3.6 are vulnerable to cross-site request forgery,...

PT-2022-13188 · WordPress · Xcloner Plugin

Name of the Vulnerable Software and Affected Versions: Backup, Restore and Migrate WordPress Sites With the XCloner Plugin versions prior to 4.3.6 Description: The issue concerns a lack of authorization and CSRF checks when resetting settings in the plugin, allowing unauthenticated attackers to...

WordPress XCloner Plugin <= 3.1.4 - Cross-Site Request Forgery (CSRF)/File Deletion Vulnerability

WordPress XCloner Plugin is vulnerable to Cross-Site Request Forgery CSRF/File Deletion Vulnerability. There's no nonce check for file deletion, but it you need to be logged in as Administrator to do it. Solution Update the plugin...

WordPress XCloner Plugin Static Code Injection Vulnerability

WordPress is a blogging platform developed using the PHP language that supports personal blog sites on servers with PHP and MySQL.XCloner is a plugin for backing up and restoring data and databases. A static code injection vulnerability exists in WordPress Xcloner that allows remote attackers to...

CVE-2015-4338

Static code injection vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary PHP code into the language files via a Translation LMFRONT field for a language, as demonstrated by language/italian.php...

CVE-2015-4337

Cross-site scripting XSS vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the exclmanual parameter in the xclonershow page to wpadmin/plugins.php...

Code injection

Static code injection vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary PHP code into the language files via a Translation LMFRONT field for a language, as demonstrated by language/italian.php...

CVE-2015-4336

The CVE concerns WordPress XCloner Plugin (3.1.2) where cloner.functions.php allows remote authenticated users to execute arbitrary commands by supplying a file containing filenames with shell metacharacters. The vulnerability arises from reading the file into $excluded_cmd and passing it to exec...

CVE-2015-4337

Cross-site scripting XSS vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the exclmanual parameter in the xclonershow page to wpadmin/plugins.php...

CVE-2015-4338

Static code injection vulnerability in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to inject arbitrary PHP code into the language files via a Translation LMFRONT field for a language, as demonstrated by language/italian.php...