7.5

CVE-2015-20067

Exploit

WP Attachment Export < 0.2.4 - Unauthenticated Posts Download

WP Attachment Export < 0.2.4 - Arbitrary File Download

The WP Attachment Export WordPress plugin before 0.2.4 does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress
Mögliche Gegenmaßnahme
WP Attachment Export: Update to version 0.2.4, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wp Attachment Export Project ≫ Wp Attachment Export SwPlatformwordpress Version < 0.2.4
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt WP Attachment Export
Version [*, 0.2.4)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.19% 0.941
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://github.com/espreto/wpsploit/blob/master/modules/auxiliary/scanner/http/wp_attachment_export_file_download.rb
Third Party Advisory
Exploit
https://seclists.org/fulldisclosure/2015/Jul/73
Third Party Advisory
Exploit
Mailing List
https://wpscan.com/vulnerability/d1a9ed65-baf3-4c85-b077-1f37d8c7793a
Third Party Advisory
Exploit
https://www.wordfence.com/threat-intel/vulnerabilities/id/cbd8d37d-50f7-4480-acef-cdec33c9f07f
Third Party Advisory