3 matches found
CVE-2016-10929
The advanced-ajax-page-loader plugin before 2.7.7 for WordPress has no protection against the reading of uploaded files when not logged in...
5.3CVSS5.8AI score0.01332EPSS
SaveExploits0References1
CVE-2016-10929
The CVE-2016-10929 entry concerns the WordPress plugin “advanced-ajax-page-loader” prior to version 2.7.7. The vulnerability is that there is no protection against reading uploaded files when the user is not logged in, enabling unauthenticated access to uploaded content. The available connected d...
5.3CVSS5.4AI score0.01332EPSS
SaveExploits0References1Affected Software1
20