CVE-2014-8607 Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Sensitive Information Disclosure
LowCVSS 2.1
EPSS 0.87%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! provides the MySQL username and password on the command line, which allows local users to obtain sensitive information via the ps command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xcloner | = 3.1.1 | No fix listed |
| xcloner | = 3.5.1 | No fix listed |
| wordpress xcloner-backup-and-restore(WordPress) | < 3.1.2 | 3.1.2 |
References
- www.vapid.dhs.org exploit
- www.vapid.dhs.org exploit
- Wordfence Intelligence third-party-advisory
- www.cve.org