Read the docs

migrate

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

migrate records in CISA KEV

No migrate vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Backup Migration 9 records CRITICAL Clone 5 records HIGH

Records

5 records in Clone · all components

TI-2023-06169 CVE-2023-6750 · GHSA-w23w-39xh-22v5

Clone < 2.4.3 - Unauthenticated Backup Download

Priority HIGH 72

The Clone WordPress plugin before 2.4.3 uses buffer files to store in-progress backup informations, which is stored at a publicly accessible, statically defined file path.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01961 Published 2024-01-08 Fixed in 2.4.3
TI-2024-28950 CVE-2024-43298 · GHSA-wxhv-5px8-hg6r

WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00446 Published 2024-11-01 No fix listed CWE-862
TI-2024-28949 CVE-2024-43297 · GHSA-6mjq-g2c9-7fgq

WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00446 Published 2024-11-01 No fix listed CWE-862
TI-2023-00909 CVE-2023-0958 · GHSA-hpq9-m2jp-4fgr

Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function

Priority LOW 30

Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00691 Published 2023-07-28 No fix listed CWE-862
TI-2023-03692 CVE-2023-3977 · GHSA-6jhg-gg85-9xxf

Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function

Priority LOW 21

Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on the handle_installation function that is called via the inisev_…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00611 Published 2023-07-28 No fix listed CWE-352
Open these records in search →