CVE-2022-0444

CVE-2022-0444: fallo en Backup, Restore and Migrate WordPress Sites…

XCloner < 4.3.6 - Plugin Settings Reset

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Backup, Restore and Migrate WordPress Sites With the XCloner Plugin

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 0.3%
The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin before 4.3.6 does not have authorisation and CSRF checks when resetting its settings, allowing unauthenticated attackers to reset them, including generating a new backup encryption key.
Productos afectados
Unknown · Backup, Restore and Migrate WordPress Sites With the XCloner Plugin