CVE-2016-10929

The advanced-ajax-page-loader plugin before 2.7.7 for WordPress has no protection against the reading of uploaded files when not logged in

published August 22, 2019

CVSS
—
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

The advanced-ajax-page-loader plugin before 2.7.7 for WordPress has no protection against the reading of uploaded files when not logged in.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01332 · 70.7th percentile
Published
2019-08-22T19:39Z
EPSS history
Timeline
  • 22 AUG 19:39Z
    The advanced-ajax-page-loader plugin before 2.7.7 for WordPress has no protection against the reading of uploaded files when not logged in
    cvelistv5