Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: migrate Component: Clone Clear all filters
TI-2024-28949 CVE-2024-43297 · GHSA-6mjq-g2c9-7fgq

WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00446 Published 2024-11-01 No fix listed CWE-862
TI-2024-28950 CVE-2024-43298 · GHSA-wxhv-5px8-hg6r

WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00446 Published 2024-11-01 No fix listed CWE-862
TI-2023-06169 CVE-2023-6750 · GHSA-w23w-39xh-22v5

Clone < 2.4.3 - Unauthenticated Backup Download

Priority HIGH 72

The Clone WordPress plugin before 2.4.3 uses buffer files to store in-progress backup informations, which is stored at a publicly accessible, statically defined file path.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01961 Published 2024-01-08 Fixed in 2.4.3
TI-2023-00909 CVE-2023-0958 · GHSA-hpq9-m2jp-4fgr

Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function

Priority LOW 30

Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00691 Published 2023-07-28 No fix listed CWE-862
TI-2023-03692 CVE-2023-3977 · GHSA-6jhg-gg85-9xxf

Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function

Priority LOW 21

Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on the handle_installation function that is called via the inisev_…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00611 Published 2023-07-28 No fix listed CWE-352