CVE-2020-35950
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2020-35950
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-35950.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2020-35950
- Published
- 2021-01-01T04:15:13.620Z
- Modified
- 2025-11-14T11:06:59.175933Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress. It allows CSRF (via almost any endpoint).
- References
Affected packages
Git / github.com/watchfulli/xcloner-wordpress
Affected ranges
- Type
- GIT
- Repo
- https://github.com/watchfulli/xcloner-wordpress
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
4.*
4.0.1
4.0.2
4.0.6
4.1.3
4.1.31
4.1.32
4.1.33
4.1.34
4.1.35
4.1.4
4.1.5
4.2.0
4.2.1
4.2.10
4.2.10a
4.2.10b
4.2.11
4.2.12
4.2.13
4.2.14
4.2.15
4.2.150
4.2.151
4.2.152
4.2.2
4.2.3
4.2.4
4.2.5
4.2.6
4.2.7
4.2.8
4.2.8r
4.2.9
4.2.9a
4.2.9b
4.2.9c
4.2.9d
Other
untagged-0681671b0a71d1a1d73e