Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2015-20067

WP Attachment Export < 0.2.4 - Unauthenticated Posts Download

Description

The WP Attachment Export WordPress plugin before 0.2.4 does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WP Attachment Export

  • 0.2.4 to < 0.2.4affected

References