WP Attachment Export < 0.2.4 - Unrestricted File Download
The plugin does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress powered site. This includes details of even privately published posts and password protected posts with their passwords revealed in plain text.
wp_attachment_exportPoC 已收录
CVSS7.5EPSS 15.4%