VULNERABILITY INTELLIGENCE

CVE-2014-8607

CVSS score2.1 LOW
EPSS probability0.86%
CISA KEVNot currently listed
Published2015-06-10
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! provides the MySQL username and password on the command line, which allows local users to obtain sensitive information via the ps command.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references