Unrated
An issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress. It allows CSRF (via almost any endpoint).
CVE-2020-35950
First seen on SecPulse
References
- report wpscan.com
- report wordfence.com