The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin was affected by a Backup and Restore 3.1.2 - XSS & Command Execution security vulnerability.
packetstormsecurity.com/files/132107/
seclists.org/bugtraq/2015/Jun/33