PT-2023-32756 · WordPress · Clone

Dmitry Ignatyev · Published 2023-12-19 · Updated 2026-04-09 · CVE-2023-6750

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Clone WordPress plugin versions prior to 2.4.3

Description The Clone WordPress plugin uses buffer files to store in-progress backup information at a publicly accessible, statically defined file path. This issue potentially affects 90,000 sites, allowing unauthenticated attackers to exploit the flaw and download database backups made with the plugin, which could lead to a complete site takeover.

Recommendations For Clone WordPress plugin versions prior to 2.4.3, update to version 2.4.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the buffer files used by the plugin to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2023-6750

Affected Products

Clone

References · 12

• 🔥 https://wpscan.com/vulnerability/fad9eefe-4552-4d20-a1fd-bb2e172ec8d7 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-6750 · Security Note
• https://osv.dev/vulnerability/CVE-2023-6750 · Vendor Advisory
• https://t.me/cvenotify/93216 · Telegram Post
• https://twitter.com/pdnuclei_bot/status/2042226051439616069 · Twitter Post
• https://twitter.com/hades3296/status/1737733047045575037 · Twitter Post
• https://twitter.com/Fix_IT_Phill/status/1737168339502256197 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1737327824095387858 · Twitter Post
• https://twitter.com/CVEnew/status/1744453197069234186 · Twitter Post
• https://twitter.com/pravin_karthik/status/1737379126351417356 · Twitter Post
• https://t.me/pentestingnews/42207 · Telegram Post
• https://twitter.com/fridaysecurity/status/1737329469285654908 · Twitter Post