CVE-2020-35950 - An issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress

CRITICAL

An issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress

Published Jan 1, 2021

9.8

CRITICAL

CVSS 3.1

EPSS 0.94%

An issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress. It allows CSRF (via almost any endpoint).

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-23533		Advisory
https://wpscan.com/vulnerability/10413		x_refsource_MISCExploitThird Party Advisory
https://www.wordfence.com/blog/2020/09/critical-vulnerabilities-patched-in-xcloner-backup-and-restore-plugin/		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 1, 2021

Updated Aug 4, 2024

Reserved Jan 1, 2021

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jan 1, 2021

Updated Aug 4, 2024

GitHub

No data