The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! stores database backup files with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to a backup file in administrators/backups/.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Xcloner Backup And Restore Plugin | — | Update xcloner-backup-and-restore plugin to version 3.1.2, or a newer patched version | May 15, 2025 | Oct 17, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub