CVE-2015-20067 WP Attachment Export < 0.2.4 - Unauthenticated Posts Download

2021-11-0108:45:50

CWE-862

WPScan

www.cve.org

0.054 Low

EPSS

Percentile

93.2%

JSON

The WP Attachment Export WordPress plugin before 0.2.4 does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress

CNA Affected

[
  {
    "product": "WP Attachment Export",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "0.2.4",
        "status": "affected",
        "version": "0.2.4",
        "versionType": "custom"
      }
    ]
  }
]