{"api_version":"1","generated_at":"2026-07-23T08:10:56+00:00","cve":"CVE-2020-35948","urls":{"html":"https://cve.report/CVE-2020-35948","api":"https://cve.report/api/cve/CVE-2020-35948.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2020-35948","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-35948"},"summary":{"title":"CVE-2020-35948","description":"An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary files, including PHP files. Doing so would allow an attacker to achieve remote code execution. The xcloner_restore.php write_file_action could overwrite wp-config.php, for example. Alternatively, an attacker could create an exploit chain to obtain a database dump.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2021-01-01 04:15:00","updated_at":"2022-02-22 10:14:00"},"problem_types":["CWE-863"],"metrics":[],"references":[{"url":"https://wpscan.com/vulnerability/10412","name":"https://wpscan.com/vulnerability/10412","refsource":"MISC","tags":["Exploit","Third Party Advisory"],"title":"XCloner Backup and Restore 4.2.1 - 4.2.12 - Unprotected AJAX Action Security Vulnerability","mime":"text/html","httpstatus":"403","archivestatus":"200"},{"url":"https://github.com/Hacker5preme/Exploits/tree/main/Wordpress/CVE-2020-35948","name":"https://github.com/Hacker5preme/Exploits/tree/main/Wordpress/CVE-2020-35948","refsource":"MISC","tags":["Exploit","Third Party Advisory"],"title":"Exploits/Wordpress/CVE-2020-35948 at main · Hacker5preme/Exploits · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://packetstormsecurity.com/files/163336/WordPress-XCloner-4.2.12-Remote-Code-Execution.html","name":"http://packetstormsecurity.com/files/163336/WordPress-XCloner-4.2.12-Remote-Code-Execution.html","refsource":"MISC","tags":[],"title":"WordPress XCloner 4.2.12 Remote Code Execution ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.wordfence.com/blog/2020/09/critical-vulnerabilities-patched-in-xcloner-backup-and-restore-plugin/","name":"https://www.wordfence.com/blog/2020/09/critical-vulnerabilities-patched-in-xcloner-backup-and-restore-plugin/","refsource":"MISC","tags":["Exploit","Third Party Advisory"],"title":"Critical Vulnerabilities Patched in XCloner Backup and Restore Plugin","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-35948","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-35948","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2020","cve_id":"35948","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"xcloner","cpe5":"xcloner","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"35948","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"xcloner","cpe5":"xcloner","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2020-35948","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary files, including PHP files. Doing so would allow an attacker to achieve remote code execution. The xcloner_restore.php write_file_action could overwrite wp-config.php, for example. Alternatively, an attacker could create an exploit chain to obtain a database dump."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"url":"https://www.wordfence.com/blog/2020/09/critical-vulnerabilities-patched-in-xcloner-backup-and-restore-plugin/","refsource":"MISC","name":"https://www.wordfence.com/blog/2020/09/critical-vulnerabilities-patched-in-xcloner-backup-and-restore-plugin/"},{"url":"https://wpscan.com/vulnerability/10412","refsource":"MISC","name":"https://wpscan.com/vulnerability/10412"},{"refsource":"MISC","name":"http://packetstormsecurity.com/files/163336/WordPress-XCloner-4.2.12-Remote-Code-Execution.html","url":"http://packetstormsecurity.com/files/163336/WordPress-XCloner-4.2.12-Remote-Code-Execution.html"},{"refsource":"MISC","name":"https://github.com/Hacker5preme/Exploits/tree/main/Wordpress/CVE-2020-35948","url":"https://github.com/Hacker5preme/Exploits/tree/main/Wordpress/CVE-2020-35948"}]},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N","version":"3.1"}}},"nvd":{"publishedDate":"2021-01-01 04:15:00","lastModifiedDate":"2022-02-22 10:14:00","problem_types":["CWE-863"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"severity":"MEDIUM","exploitabilityScore":8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:xcloner:xcloner:*:*:*:*:*:wordpress:*:*","versionStartIncluding":"4.2.1","versionEndExcluding":"4.2.13","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2020","CveId":"35948","Ordinal":"195964","Title":"CVE-2020-35948","CVE":"CVE-2020-35948","Year":"2020"},"notes":[{"CveYear":"2020","CveId":"35948","Ordinal":"1","NoteData":"An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary files, including PHP files. Doing so would allow an attacker to achieve remote code execution. The xcloner_restore.php write_file_action could overwrite wp-config.php, for example. Alternatively, an attacker could create an exploit chain to obtain a database dump.","Type":"Description","Title":null},{"CveYear":"2020","CveId":"35948","Ordinal":"2","NoteData":"2020-12-31","Type":"Other","Title":"Published"},{"CveYear":"2020","CveId":"35948","Ordinal":"3","NoteData":"2021-07-01","Type":"Other","Title":"Modified"}]}}}