CVE-2022-0444 — XCloner < 4.3.6 - Plugin Settings Reset
The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin before 4.3.6 does not have authorisation and CSRF checks when resetting its settings, al…
Published: 2022-06-27 · CVSS: Unscored
The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin before 4.3.6 does not have authorisation and CSRF checks when resetting its settings, allowing unauthenticated attackers to reset them, including generating a new backup encryption key.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7