CVE-2015-20067CWE-862

WP Attachment Export < 0.2.4 - Unauthenticated Posts Download

18Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 8.2%

probabilidade de exploração

8.2%top 6% das CVEs

exploração observada

nãonenhuma fonte reporta

The WP Attachment Export WordPress plugin before 0.2.4 does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress

Produtos afetados

Unknown · WP Attachment Export

Referências

https://github.com/espreto/wpsploit/blob/master/modules/auxiliary/scanner/http/wp_attachment_export_file_download.rb https://seclists.org/fulldisclosure/2015/Jul/73 https://wpscan.com/vulnerability/d1a9ed65-baf3-4c85-b077-1f37d8c7793a