Read the docs

Wp Attachment Export Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Wp Attachment Export Project records in CISA KEV

No Wp Attachment Export Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Wp Attachment Export · all components

Priority MEDIUM 43

The WP Attachment Export WordPress plugin before 0.2.4 does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.07729 Published 2021-11-01 Fixed in 0.2.4 CWE-862
Open these records in search →