{"metadata": {"vulnerability": "CVE-2020-35948", "count": 23, "kinds": {"milestone": 4, "sighting": 5, "kev": 5, "other": 9}}, "data": [{"timestamp": "2020-09-22T13:28:02Z", "date_only": false, "value": "2020-09-22T13:28:02+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-35948", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a309c9c3-7548-490a-9510-538de0181b38", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2020-09-22T13:28:02Z", "date_only": false, "value": "2020-09-22T13:28:02.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2020-35948", "field": "evidence.0.details.added_date", "uuid": "a309c9c3-7548-490a-9510-538de0181b38", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2020-09-22T13:28:02Z", "date_only": false, "value": "2020-09-22T13:28:02+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2020-35948", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a309c9c3-7548-490a-9510-538de0181b38", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2020-09-22T13:28:02Z", "date_only": false, "value": "2020-09-22T13:28:02+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2020-35948", "field": "status.status_updated_at", "uuid": "a309c9c3-7548-490a-9510-538de0181b38", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-01-01T00:00:00Z", "date_only": false, "value": "2021-01-01T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-35948", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-01-01T03:27:47Z", "date_only": false, "value": "2021-01-01T03:27:47.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-35948", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-01-01T04:15:00Z", "date_only": false, "value": "2021-01-01T04:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P2JC-8HC7-J466", "record": "GHSA-P2JC-8HC7-J466", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-01-01T04:15:00Z", "date_only": false, "value": "2021-01-01T04:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-35948", "record": "GSD-2020-35948", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-01-01T04:15:13.497Z", "date_only": false, "value": "2021-01-01T04:15:13.497", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-35948", "record": "FKIE_CVE-2020-35948", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-01-01T07:32:27Z", "date_only": false, "value": "2021-01-01T07:32:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/21489", "record": "CVE-2020-35948", "field": "creation_timestamp", "uuid": "cd648adc-cdc2-49bb-9fd0-d135c5e63707", "content": "\u203c CVE-2020-35948 \u203c\n\nAn issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary files, including PHP files. Doing so would allow an attacker to achieve remote code execution. The xcloner_restore.php write_file_action could overwrite wp-config.php, for example. Alternatively, an attacker could create an exploit chain to obtain a database dump.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/21489"}, {"timestamp": "2021-07-10T16:29:07Z", "date_only": false, "value": "2021-07-10T16:29:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eMoVbCeI-n-jaFKeB-W9ZjnKBEe6KGFrv-r960DcFriPRg", "record": "CVE-2020-35948", "field": "creation_timestamp", "uuid": "e800766c-3573-4ea0-afce-542c44473940", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-09-21T04:42:20Z", "date_only": false, "value": "2021-09-21T04:42:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pwnwiki_zhchannel/732", "record": "CVE-2020-35948", "field": "creation_timestamp", "uuid": "e0f2b4a3-4f0c-44e5-978e-1caa78bf22ee", "content": "CVE-2020-35948 wordpress Plugin XCloner 4.2.12 \u9060\u7a0b\u4ee3\u78bc\u57f7\u884c\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2020-35948_wordpress_Plugin_XCloner_4.2.12_%E9%81%A0%E7%A8%8B%E4%BB%A3%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/732"}, {"timestamp": "2022-02-14T19:43:06Z", "date_only": false, "value": "2022-02-14T19:43:06.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2020-35948", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-02-22T10:14:00Z", "date_only": false, "value": "2022-02-22T10:14Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-35948", "record": "GSD-2020-35948", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-24T17:37:50Z", "date_only": false, "value": "2022-05-24T17:37:50Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P2JC-8HC7-J466", "record": "GHSA-P2JC-8HC7-J466", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-05-24T17:37:50Z", "date_only": false, "value": "2022-05-24T17:37:50Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P2JC-8HC7-J466", "record": "GHSA-P2JC-8HC7-J466", "field": "modified"}, {"timestamp": "2023-12-13T01:22:01.114Z", "date_only": false, "value": "2023-12-13T01:22:01.114291Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-35948", "record": "GSD-2020-35948", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T17:16:13.477Z", "date_only": false, "value": "2024-08-04T17:16:13.477Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-35948", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T17:16:13.477Z", "date_only": false, "value": "2024-08-04T17:16:13.477Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-35948", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:14:39.763Z", "date_only": false, "value": "2026-06-17T03:14:39.763", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-35948", "record": "FKIE_CVE-2020-35948", "field": "lastModified"}, {"timestamp": "2026-06-19T12:53:12.311Z", "date_only": false, "value": "2026-06-19T12:53:12.311400Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ebf96929-2cff-47a5-b5b9-5d197ada266c", "record": "CVE-2020-35948", "field": "creation_timestamp", "uuid": "d1485217-f387-4ec0-8313-7d1bec152588", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ebf96929-2cff-47a5-b5b9-5d197ada266c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2020-35948", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a309c9c3-7548-490a-9510-538de0181b38", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:02.648Z", "date_only": false, "value": "2026-06-23T14:04:02.648308Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a309c9c3-7548-490a-9510-538de0181b38", "record": "CVE-2020-35948", "field": "creation_timestamp", "uuid": "447e1873-86e2-44d2-9182-646ef0c260bb", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a309c9c3-7548-490a-9510-538de0181b38", "metric_role": "exploitation", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-10-31T14:03:27.401Z", "anchors": {"origin": {"timestamp": "2021-01-01T03:27:47Z", "date_only": false, "value": "2021-01-01T03:27:47.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-35948", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-01-01T03:27:47Z", "date_only": false, "value": "2021-01-01T03:27:47.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-35948", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2021-07-10T16:29:07Z", "date_only": false, "value": "2021-07-10T16:29:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eMoVbCeI-n-jaFKeB-W9ZjnKBEe6KGFrv-r960DcFriPRg", "record": "CVE-2020-35948", "field": "creation_timestamp", "uuid": "e800766c-3573-4ea0-afce-542c44473940", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2020-09-22T13:28:02Z", "date_only": false, "value": "2020-09-22T13:28:02+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-35948", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a309c9c3-7548-490a-9510-538de0181b38", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": -8690385.0, "hours": -2413.9958333333334, "days": -100.58315972222222, "min_seconds": -8690385.0, "max_seconds": -8690385.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2021-01-01T03:27:47Z", "date_only": false, "value": "2021-01-01T03:27:47.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-35948", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2020-09-22T13:28:02Z", "date_only": false, "value": "2020-09-22T13:28:02+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-35948", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a309c9c3-7548-490a-9510-538de0181b38", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": -8690385.0, "hours": -2413.9958333333334, "days": -100.58315972222222, "min_seconds": -8690385.0, "max_seconds": -8690385.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2021-01-01T03:27:47Z", "date_only": false, "value": "2021-01-01T03:27:47.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-35948", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2020-09-22T13:28:02Z", "date_only": false, "value": "2020-09-22T13:28:02+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-35948", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a309c9c3-7548-490a-9510-538de0181b38", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 16462880.0, "hours": 4573.022222222222, "days": 190.5425925925926, "min_seconds": 16462880.0, "max_seconds": 16462880.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-01-01T03:27:47Z", "date_only": false, "value": "2021-01-01T03:27:47.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-35948", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-07-10T16:29:07Z", "date_only": false, "value": "2021-07-10T16:29:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eMoVbCeI-n-jaFKeB-W9ZjnKBEe6KGFrv-r960DcFriPRg", "record": "CVE-2020-35948", "field": "creation_timestamp", "uuid": "e800766c-3573-4ea0-afce-542c44473940", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 183983740.401948, "hours": 51106.594556096665, "days": 2129.441439837361, "min_seconds": 183983740.401948, "max_seconds": 183983740.401948, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-01-01T03:27:47Z", "date_only": false, "value": "2021-01-01T03:27:47.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-35948", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T14:03:27.401Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 192674125.401948, "hours": 53520.59038943, "days": 2230.0245995595833, "min_seconds": 192674125.401948, "max_seconds": 192674125.401948, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-09-22T13:28:02Z", "date_only": false, "value": "2020-09-22T13:28:02+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-35948", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a309c9c3-7548-490a-9510-538de0181b38", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-10-31T14:03:27.401Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 167520860.401948, "hours": 46533.57233387444, "days": 1938.8988472447686, "min_seconds": 167520860.401948, "max_seconds": 167520860.401948, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-07-10T16:29:07Z", "date_only": false, "value": "2021-07-10T16:29:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eMoVbCeI-n-jaFKeB-W9ZjnKBEe6KGFrv-r960DcFriPRg", "record": "CVE-2020-35948", "field": "creation_timestamp", "uuid": "e800766c-3573-4ea0-afce-542c44473940", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-31T14:03:27.401Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}