{"metadata": {"vulnerability": "CVE-2020-35948", "count": 24, "kinds": {"milestone": 4, "sighting": 6, "kev": 5, "other": 9}}, "data": [{"timestamp": "2020-09-22T13:28:02Z", "date_only": false, "value": "2020-09-22T13:28:02+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-35948", "field": "timestamps.asserted_at", "uuid": "f5d902ca-868d-4026-ac49-71b718590212", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2020-09-22T13:28:02Z", "date_only": false, "value": "2020-09-22T13:28:02.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2020-35948", "field": "evidence.0.details.added_date", "uuid": "f5d902ca-868d-4026-ac49-71b718590212", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2020-09-22T13:28:02Z", "date_only": false, "value": "2020-09-22T13:28:02+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2020-35948", "field": "timestamps.first_seen_at", "uuid": "f5d902ca-868d-4026-ac49-71b718590212", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2020-09-22T13:28:02Z", "date_only": false, "value": "2020-09-22T13:28:02+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2020-35948", "field": "status.status_updated_at", "uuid": "f5d902ca-868d-4026-ac49-71b718590212", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-01-01T00:00:00Z", "date_only": false, "value": "2021-01-01T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-35948", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-01-01T03:27:47Z", "date_only": false, "value": "2021-01-01T03:27:47.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-35948", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-01-01T04:15:00Z", "date_only": false, "value": "2021-01-01T04:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P2JC-8HC7-J466", "record": "GHSA-P2JC-8HC7-J466", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-01-01T04:15:00Z", "date_only": false, "value": "2021-01-01T04:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-35948", "record": "GSD-2020-35948", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-01-01T04:15:13.497Z", "date_only": false, "value": "2021-01-01T04:15:13.497", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-35948", "record": "FKIE_CVE-2020-35948", "field": "published"}, {"timestamp": "2021-01-01T07:32:27Z", "date_only": false, "value": "2021-01-01T07:32:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/21489", "record": "CVE-2020-35948", "field": "creation_timestamp", "uuid": "cd648adc-cdc2-49bb-9fd0-d135c5e63707", "content": "\u203c CVE-2020-35948 \u203c\n\nAn issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary files, including PHP files. Doing so would allow an attacker to achieve remote code execution. The xcloner_restore.php write_file_action could overwrite wp-config.php, for example. Alternatively, an attacker could create an exploit chain to obtain a database dump.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/21489"}, {"timestamp": "2021-07-10T16:29:07Z", "date_only": false, "value": "2021-07-10T16:29:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eMoVbCeI-n-jaFKeB-W9ZjnKBEe6KGFrv-r960DcFriPRg", "record": "CVE-2020-35948", "field": "creation_timestamp", "uuid": "e800766c-3573-4ea0-afce-542c44473940"}, {"timestamp": "2021-09-21T04:42:20Z", "date_only": false, "value": "2021-09-21T04:42:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pwnwiki_zhchannel/732", "record": "CVE-2020-35948", "field": "creation_timestamp", "uuid": "e0f2b4a3-4f0c-44e5-978e-1caa78bf22ee", "content": "CVE-2020-35948 wordpress Plugin XCloner 4.2.12 \u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2020-35948_wordpress_Plugin_XCloner_4.2.12_%E9%81%A0%E7%A8%8B%E4%BB%A3%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/732"}, {"timestamp": "2022-02-14T19:43:06Z", "date_only": false, "value": "2022-02-14T19:43:06.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2020-35948", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-02-22T10:14:00Z", "date_only": false, "value": "2022-02-22T10:14Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-35948", "record": "GSD-2020-35948", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-24T17:37:50Z", "date_only": false, "value": "2022-05-24T17:37:50Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P2JC-8HC7-J466", "record": "GHSA-P2JC-8HC7-J466", "field": "published"}, {"timestamp": "2022-05-24T17:37:50Z", "date_only": false, "value": "2022-05-24T17:37:50Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P2JC-8HC7-J466", "record": "GHSA-P2JC-8HC7-J466", "field": "modified"}, {"timestamp": "2023-12-13T01:22:01.114Z", "date_only": false, "value": "2023-12-13T01:22:01.114291Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-35948", "record": "GSD-2020-35948", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T17:16:13.477Z", "date_only": false, "value": "2024-08-04T17:16:13.477Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-35948", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T17:16:13.477Z", "date_only": false, "value": "2024-08-04T17:16:13.477Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-35948", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:14:39.763Z", "date_only": false, "value": "2026-06-17T03:14:39.763", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-35948", "record": "FKIE_CVE-2020-35948", "field": "lastModified"}, {"timestamp": "2026-06-19T12:53:12.311Z", "date_only": false, "value": "2026-06-19T12:53:12.311400Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ebf96929-2cff-47a5-b5b9-5d197ada266c", "record": "CVE-2020-35948", "field": "creation_timestamp", "uuid": "d1485217-f387-4ec0-8313-7d1bec152588", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ebf96929-2cff-47a5-b5b9-5d197ada266c"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2020-35948", "field": "timestamps.recorded_at", "uuid": "f5d902ca-868d-4026-ac49-71b718590212", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:12:52.771Z", "date_only": false, "value": "2026-06-23T11:12:52.771286Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/f5d902ca-868d-4026-ac49-71b718590212", "record": "CVE-2020-35948", "field": "creation_timestamp", "uuid": "07b0499e-13e7-4aff-8f10-73e61d8cce2a", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/f5d902ca-868d-4026-ac49-71b718590212"}, {"timestamp": "2026-06-23T14:04:02.648Z", "date_only": false, "value": "2026-06-23T14:04:02.648308Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a309c9c3-7548-490a-9510-538de0181b38", "record": "CVE-2020-35948", "field": "creation_timestamp", "uuid": "447e1873-86e2-44d2-9182-646ef0c260bb", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a309c9c3-7548-490a-9510-538de0181b38"}]}
