CVE-2015-20067

WP Attachment Export < 0.2.4 - Unauthenticated Posts Download

The WP Attachment Export WordPress plugin before 0.2.4 does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress

Affected

WP Attachment Export

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

7.73% chance of exploitation in the next 30 days, 95th percentile

Nuclei

high · CWE-862

Published

2021-11-01

Updated

2024-08-06

Proof-of-concept exploits (2)

• https://seclists.org/fulldisclosure/2015/Jul/73
• https://wpscan.com/vulnerability/d1a9ed65-baf3-4c85-b077-1f37d8c7793a

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-20067.yaml

Security advisories

• espreto/wpsploit/blob/master/modules/auxiliary/scanner/http/wp_attachment_export_file_dow…

References

• CVE Record
• NVD entry