Backup, Restore and Migrate WordPress Sites With the XCloner Plugin, CVE-2014-8605

CVE, Research URL: CVE-2014-8605
Home page URL: Security reports for Backup, Restore and Migrate WordPress Sites With the XCloner Plugin
Application: Backup, Restore and Migrate WordPress Sites With the XCloner Plugin
Published on: Jun 10, 2015
Research Description: The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! stores database backup files with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to a backup file in administrators/backups/.
Affected versions: Min -, max 3.1.2.
Status: vulnerable