CVE-2015-20067CWE-862

WP Attachment Export < 0.2.4 - Unauthenticated Posts Download

18Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 8.2%

probabilidad de explotación

8.2%top 6% de las CVE

explotación observada

noninguna fuente lo reporta

The WP Attachment Export WordPress plugin before 0.2.4 does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress

Productos afectados

Unknown · WP Attachment Export

Referencias

https://github.com/espreto/wpsploit/blob/master/modules/auxiliary/scanner/http/wp_attachment_export_file_download.rb https://seclists.org/fulldisclosure/2015/Jul/73 https://wpscan.com/vulnerability/d1a9ed65-baf3-4c85-b077-1f37d8c7793a