CVE-2022-0444

MEDIUM 4.3CVE-2022-0444 · Published 27/06/2022 · updated 17/06/2026

In short

CVE-2022-0444 is a MEDIUM (CVSS 4.3) vulnerability affecting xcloner (watchful).
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 22.2% of all vulnerabilities.
Fix: update to 4.3.6 or later.

Package	Affected versions	Patched versions
xcloner watchful	`< 4.3.6`	`4.3.6`

Description

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin before 4.3.6 does not have authorisation and CSRF checks when resetting its settings, allowing unauthenticated attackers to reset them, including generating a new backup encryption key.

References

wpscan.com/vulnerability/9567d295-43c7-4e59-9283-c7726f16d40b · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free