2 matches found
CVE-2016-10983
The ghost plugin before 0.5.6 for WordPress has no access control for wp-admin/tools.php?ghostexport=true downloads of exported data...
7.1CVSS0.01518EPSS
SaveExploits1References2
PT-2019-7776
Name of the Vulnerable Software and Affected Versions WordPress ghost plugin versions prior to 0.5.6 Description The issue concerns a lack of access control in the ghost plugin for WordPress, allowing unauthorized downloads of exported data through the "wp-admin/tools.php?ghostexport=true"...
6.5CVSS0.01518EPSS
SaveExploits1References5
20