CVE-2020-35948

CVSS 9.9 CRITICALEPSS 24.9%

Vexday Risk Score

53Atención

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Prueba de concepto

Existe prueba de concepto pública, pero aún no automatizada.

CVSS 9.9EPSS 24.9%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Ciclo de vida

01 ene 2021Publicada en NVD

01 jul 2021PoC pública

Velocidad de armamento

181 díashasta el primer PoC

Recomendación: Planificar corrección próxima — ya existe PoC pública.

An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary files, including PHP files. Doing so would allow an attacker to achieve remote code execution. The xcloner_restore.php write_file_action could overwrite wp-config.php, for example. Alternatively, an attacker could create an exploit chain to obtain a database dump.

CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N

Productos afectados

n/a · n/a

PoCs públicas encontradas — 2

cve_referencepacketstormsecurity.com/files/163336/WordPress-XCloner-4.2.12-Remote-Code-Execution.htmlno verificado exploitdbwww.exploit-db.com/exploits/50077no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

http://packetstormsecurity.com/files/163336/WordPress-XCloner-4.2.12-Remote-Code-Execution.html https://github.com/Hacker5preme/Exploits/tree/main/Wordpress/CVE-2020-35948 https://wpscan.com/vulnerability/10412 https://www.wordfence.com/blog/2020/09/critical-vulnerabilities-patched-in-xcloner-backup-and-restore-plugin/