CVE-2015-20067CWE-862

WP Attachment Export < 0.2.4 - Unauthenticated Posts Download

published November 1, 2021

CVSS
—
EPSS
8%
Percentile
94.6
In the wild
Unconfirmed
What it is

The WP Attachment Export WordPress plugin before 0.2.4 does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07729 · 94.6th percentile
Weakness
CWE-862 · Missing Authorization
Published
2021-11-01T08:45Z
EPSS history
Timeline
  • 01 NOV 08:45Z
    WP Attachment Export < 0.2.4 - Unauthenticated Posts Download
    cvelistv5