XCloner Backup and Restore Plugin (WordPress) Update
3086Warning Date
Severity Level
Warning Number
Target Sector
23 September, 2020
● Critical
2020-1817
All
Description:
Wordfence has released security update to address a vulnerability in the following plugin:
- XCloner Backup and Restore
- 4.2.1 – 4.2.12
Threats:
Attacker could exploit this vulnerability by doing the following:
- Information disclosure.
- Cross-site request forgery (CSRF).
- Remote code execution.
Best practice and Recommendations:
The CERT team encourages users to review Wordfence security advisory and apply the necessary updates: