Read the docs

watchful

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

watchful records in CISA KEV

No watchful vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Xcloner 1 record LOW

Records

4 records

TI-2024-06082 CVE-2024-6559 · GHSA-gg88-333c-97wf

XCloner <= 4.7.3 - Unauthenticated Full Path Disclosure

Priority LOW 30

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 4.7.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00373 Published 2024-07-16 No fix listed CWE-200
TI-2022-00367 CVE-2022-0444 · GHSA-c7r4-v2h5-45gx

XCloner < 4.3.6 - Plugin Settings Reset

Priority LOW 20

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin before 4.3.6 does not have authorisation and CSRF checks when resetting its settings, allowing unauthenticated attackers to reset t…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00294 Published 2022-06-27 Fixed in 4.3.6 CWE-352
Open these records in search →