CVE-2020-35948

CVSS 9.9 CRITICALEPSS 24.9%

Vexday Risk Score

53Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Proof of concept

Public proof of concept exists, but not yet automated.

CVSS 9.9EPSS 24.9%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

01 Jan 2021Published on NVD

01 Jul 2021Public PoC

Weaponization speed

181 daysto first PoC

Recommendation: Plan a near-term fix — a public PoC already exists.

An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary files, including PHP files. Doing so would allow an attacker to achieve remote code execution. The xcloner_restore.php write_file_action could overwrite wp-config.php, for example. Alternatively, an attacker could create an exploit chain to obtain a database dump.

CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N

Affected products

n/a · n/a

public PoCs found — 2

cve_referencepacketstormsecurity.com/files/163336/WordPress-XCloner-4.2.12-Remote-Code-Execution.htmlunverified exploitdbwww.exploit-db.com/exploits/50077unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://packetstormsecurity.com/files/163336/WordPress-XCloner-4.2.12-Remote-Code-Execution.html https://github.com/Hacker5preme/Exploits/tree/main/Wordpress/CVE-2020-35948 https://wpscan.com/vulnerability/10412 https://www.wordfence.com/blog/2020/09/critical-vulnerabilities-patched-in-xcloner-backup-and-restore-plugin/