VULNERABILITY INTELLIGENCE

CVE-2022-0444

CVSS score4.3 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2022-06-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Description

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin before 4.3.6 does not have authorisation and CSRF checks when resetting its settings, allowing unauthenticated attackers to reset them, including generating a new backup encryption key.

Weakness classification

  • nvd@nist.gov: CWE-352

Primary references