6 matches found
PT-2025-47698
The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.14.17 via the import/export functionality and a lack of .htaccess protection. This makes it possible for unauthenticated...
CVE-2025-12894: Files or Directories Accessible to External Parties
The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.14.17 via the import/export functionality and a lack of .htaccess protection. This makes it possible for unauthenticated...
CVE-2018-13258
Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible...
CVE-2018-13258: Exposure of Sensitive Information to an Unauthorized Actor
Mediawiki 1.31 before 1.31.1 misses .htaccess files in the provided tarball used to protect some directories that shouldn't be web accessible...
PT-2018-11722
Name of the Vulnerable Software and Affected Versions MediaWiki version 1.31 Description The issue arises from missing .htaccess files in the provided tarball for MediaWiki, which are used to protect certain directories from being web accessible. Recommendations For MediaWiki version 1.31, update...
