CVE-2022-0444

4.3 mediumEPSS 0.3%

Medium (4.3) in watchful xcloner. EPSS 0.3% chance of exploitation in the next 30 days.

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin before 4.3.6 does not have authorisation and CSRF checks when resetting its settings, allowing unauthenticated attackers to reset them, including generating a new backup encryption key.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWEs: CWE-352, CWE-862
Published: 2022-06-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

watchful:xcloner

References

https://wpscan.com/vulnerability/9567d295-43c7-4e59-9283-c7726f16d40b
https://wpscan.com/vulnerability/9567d295-43c7-4e59-9283-c7726f16d40b

Check your stack JSON