blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2014-8605

MEDIUM 5.0 CVSS 2.0
Published
June 10, 2015
Last modified
June 17, 2026
NVD status
Modified
Reported by
cve@mitre.org
Weakness
CWE-264
CVSS vector
AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! stores database backup files with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to a backup file in administrators/backups/.

Affected products and versions

  • n/a n/a — Versions not specified
  • xcloner xcloner — Version 3.1.1

References