| Package | Affected versions | Patched versions |
|---|---|---|
| xcloner | = 3.1.2 |
cloner.functions.php in the XCloner plugin 3.1.2 for WordPress allows remote authenticated users to execute arbitrary commands via a file containing filenames with shell metacharacters, as demonstrated by using the backup comments feature to create the file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free