WP Attachment Export < 0.2.4 - Unauthenticated Posts Download
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 8.2%
exploitation probability
8.2%top 6% of all CVEs
observed exploitation
nono source reports it
The WP Attachment Export WordPress plugin before 0.2.4 does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress
Affected products
Unknown · WP Attachment Export