Backup, Restore and Migrate your sites with XCloner

Explore Backup, Restore and Migrate your sites with XCloner vulnerabilities across all versions. Currently tracking 17 known vulnerabilities, including severity, impact, and patch status.

01234567891028.09.2010Today02.04.20145.4Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.0 - Cross-Site Request Forgery CVSS 5.4 · 02.04.201409.04.20149.6Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.0 - Multiple Cross-Site Request Forgery CVSS 9.6 · 09.04.201417.10.20147.2Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Sensitive Information Disclosure CVSS 7.2 · 17.10.20147.2Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Remote Code Execution CVSS 7.2 · 17.10.20144.9Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Directory Traversal CVSS 4.9 · 17.10.20147.5Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Improper Access Control to Information Disclosure CVSS 7.5 · 17.10.20147.5Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.1 - Sensitive Information Disclosure CVSS 7.5 · 17.10.201410.05.20156.1Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.2 - Cross-Site Scripting CVSS 6.1 · 10.05.20159.8Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.2 - Remote Code Execution CVSS 9.8 · 10.05.20158.8Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.2 - Remote Command Execution CVSS 8.8 · 10.05.201531.12.20164.3Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 3.1.4 - Path Traversal to Sensitive Information Disclosure CVSS 4.3 · 31.12.201618.08.20208.8Backup, Restore and Migrate WordPress Sites With the XCloner Plugin 4.2.1 - 4.2.12 - Unprotected AJAX Actions CVSS 8.8 · 18.08.20209.8Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 4.2.152 - Cross-Site Request Forgery CVSS 9.8 · 18.08.202006.06.20229.8Backup, Restore and Migrate WordPress Sites With the XCloner Plugin <= 4.2.16 - Unauthenticated Plugin Settings Reset CVSS 9.8 · 06.06.202215.07.20245.3XCloner <= 4.7.3 - Unauthenticated Full Path Disclosure CVSS 5.3 · 15.07.202404.12.20254.3Backup, Restore and Migrate your sites with XCloner <= 4.8.2 - Cross-Site Request Forgery in Xcloner_Remote_Storage:save() CVSS 4.3 · 04.12.202503.06.20264.3Backup, Restore and Migrate your sites with XCloner <= 4.8.6 - Authenticated (Subscriber+) Information Exposure CVSS 4.3 · 03.06.2026

Strategic Overview

Avg CVSSHigh
7.1/ 10
Patch Coverage100%
Open

0

Fixed

17

Get automatic notifications for all Backup, Restore and Migrate your sites with XCloner vulnerabilities before they are exploited.

Vulnerability Records

17 records
2026-06-03 00:00CVE-2026-48965
4.3
Medium
kai63001Yes
2025-12-04 13:31CVE-2025-11759
4.3
Medium
Rafshanzani SuhadaYes
2024-07-15 00:00CVE-2024-6559
5.3
Medium
stealthcopterYes
2022-06-06 00:00CVE-2022-0444
9.8
Critical
Krzysztof ZającYes
2020-08-18 00:00CVE-2020-35948
8.8
High
Chloe ChamberlandYes
2020-08-18 00:00CVE-2020-35950
9.8
Critical
Chloe ChamberlandYes
2016-12-31 00:00N/A
4.3
Medium
AnonymousYes
2015-05-10 00:00CVE-2015-4337
6.1
Medium
Larry W. CashdollarYes
2015-05-10 00:00CVE-2015-4338
9.8
Critical
Larry W. CashdollarYes
2015-05-10 00:00CVE-2015-4336
8.8
High
Larry W. CashdollarYes
Showing 1–10 of 17 reports
Backup, Restore and Migrate your sites with XCloner banner
Latestv4.8.7

Backup, Restore and Migrate your sites with XCloner

watchful

Author

watchful

4.2(129)
84/100
Last Updated
2026-05-26 (2mo ago)
Active Installs
10,000+
Downloads
1,450,250
Requires WP
5.1+
Requires PHP
7.3+
Tested up to
WP 7.0.2
Created
2010-09-28 (16y ago)

XCloner is a backup plugin that allows you to safely back up and restore your WordPress sites. You can send your site backups to SFTP, Dropbox, Amazon, Google Drive, Backblaze and other locations. You can create backups manually or automatically with XCloner’s built-in scheduler. XCloner enables you to automatically generate backups with the built-in cron script. These cron jobs can run daily, weekly, monthly or even hourly. XCloner allows you to generate custom backups of any WordPress site, and then restore the backup on any other location with the help of the automatic restore script we provide! XCloner has many useful safety features. For example, XCloner will generate a core, plugins, themes or languages files backup before the automatic update of WordPress core, plugins, themes or languages files. Remote Storage for WordPress Backups XCloner allows you to send your backups to remote storage locations supporting FTP, SFTP, DropBox, Amazon S3, Google Drive, WebDAV, Backblaze, Azure and many more to come You can generate “Differential Backups” so your backup will include only files modified after a certain date. This can decrease the space needed to store your backups. XCloner also has safety features to make sure your backups are successful. One example: you have the ability to split backups into multiple smaller parts if a certain size limit is reached. Another example: XCloner can also store a local copy of the backup that it will then delete when the backup has been sent to the remote location. Secure, GDPR Compliant WordPress Backups XCloner is the best backup choice for people who care about security and privacy. XCloner uses open source standards like TAR, MySQL and CSV formats so you can be sure that your backups can be restored in a variety of ways, giving you more flexibility and full control. XCloner has a built-in security layer to protect your backups. You can create encrypted backup archives with AES-128-CBC algorithm. This encryption helps to ensure that your data is still GDPR compliant even if the backup fails. Restore Backups Anywhere You can restore backups on any location compatible with your website by using the XCloner restore feature. Your site clone can be restored on a totally different server, with new server and MySQL details. XCloner will attempt to extract the backup archive files for you, as well as import the MySQL dump and update your WordPress configuration details. The restore script is located inside the XCloner archive, in the /restore/ directory. XCloner can restore your original file and directory permissions. XCloner can also automatically update the new host settings to the configuration file. XCloner has a variety of restoration options including: All Files, Only Plugins Files, Only Theme Files, Only Uploads Files, and Only Database Backup. XCloner works best with the Watchful dashboard Watchful is a web developers toolbox for remotely managing and monitoring multiple WordPress websites. Simply add all your production and staging sites into the Watchful Dashboard and use our tools to monitor uptime and site backups, plus updates to WordPress and core and plugins, and more. XCloner integrates smoothly with Watchful. You’ll be amazed at how much time and money you save managing your WordPress sites with Watchful.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C