medium5.0Public exploit code
CVE-2014-8604
The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin / Joomla! Component XCloner - Multiple Vulnerabilities2014-11-10 · webapps · php
Impact
The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! returns the MySQL password in cleartext to a text box in the configuration panel, which allows remote attackers to obtain sensitive information via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xcloner | Xcloner | Versions 3.1.1, 3.5.1 |