PT-2021-11880 · WordPress · Xcloner Backup/Restore

Chloe Chamberland · Published 2021-01-01 · Updated 2022-02-22 · CVE-2020-35948

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N

Name of the Vulnerable Software and Affected Versions: XCloner Backup and Restore plugin versions prior to 4.2.13

Description: An issue in the XCloner Backup and Restore plugin for WordPress allows authenticated attackers to modify arbitrary files, including PHP files, which can lead to remote code execution. The write file action in xcloner restore.php can be used to overwrite sensitive files like wp-config.php. Additionally, an attacker could create an exploit chain to obtain a database dump.

Recommendations: For versions prior to 4.2.13, update to version 4.2.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the xcloner restore.php file and limiting the ability to modify sensitive files like wp-config.php until a patch is applied. Avoid using the write file action in xcloner restore.php until the issue is resolved.

Exploit

Fix

RCE

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2020-35948

Affected Products

Xcloner Backup/Restore

References · 9

• 🔥 https://github.com/Hacker5preme/Exploits/tree/main/Wordpress/CVE-2020-35948 · Exploit
• 🔥 https://wordfence.com/blog/2020/09/critical-vulnerabilities-patched-in-xcloner-backup-and-restore-plugin · Exploit
• 🔥 https://exploit-db.com/exploits/50077 · Exploit
• 🔥 https://wpscan.com/vulnerability/10412 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-35948 · Security Note
• https://osv.dev/vulnerability/CVE-2020-35948 · Vendor Advisory
• https://t.me/cibsecurity/21489 · Telegram Post
• http://packetstormsecurity.com/files/163336/WordPress-XCloner-4.2.12-Remote-Code-Execution.html · Note
• https://t.me/cvenotify/16954 · Telegram Post