CVE-2024-10098

creationtimestamp| type| source ---|---|--- 2025-05-20 16:40:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17007...

WordPress ApplyOnline – Application Form Builder and Manager plugin < 2.6.3 - Unauthenticated Application File Access vulnerability

Unauthenticated Application File Access vulnerability discovered by Arian Mosallah in WordPress Plugin ApplyOnline versions 2.6.3...

CVE-2024-10098 ApplyOnline – Application Form Builder and Manager < 2.6.3 - Unauthenticated Application File Access

The ApplyOnline WordPress plugin before 2.6.3 does not protect uploaded files during the application process, allowing unauthenticated users to access them and any private information they contain...

CVE-2024-10098 ApplyOnline – Application Form Builder and Manager < 2.6.3 - Unauthenticated Application File Access

The ApplyOnline WordPress plugin before 2.6.3 does not protect uploaded files during the application process, allowing unauthenticated users to access them and any private information they contain...

CVE-2024-10098

The ApplyOnline WordPress plugin (versions prior to 2.6.3 ) is vulnerable to an unauthenticated application file access flaw. The root cause is that the plugin fails to protect files uploaded during the application process, which allows unauthorized users to access these files and any private inf...