Vulnerabilities

CVE-2015-20067

November 3, 2021

The WP Attachment Export WordPress plugin before 0.2.4 does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress

Summary:

Reference Links(if available):

https://seclists.org/fulldisclosure/2015/Jul/73

https://github.com/espreto/wpsploit/blob/master/modules/auxiliary/scanner/http/wp_attachment_export_file_download.rb

https://wpscan.com/vulnerability/d1a9ed65-baf3-4c85-b077-1f37d8c7793a

CVSS Score (if available)

v2: / MEDIUM

v3: /

Links to Exploits(if available)

Microsoft Addresses Four Critical Zero-Days in November Patch Tuesday Updates

November 14, 2024

AI Threat Worsening in 2025: Insights from Google Cloud

November 14, 2024

Lazarus Group’s Code Smuggling Technique Exploits Extended Attributes in macOS

November 14, 2024

Ethical Hacker or Not? Amazon MOVEit Leaker’s Controversial Claims

November 14, 2024

Hive0145 Targets Europe with Sophisticated Strela Stealer Campaigns

November 14, 2024

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

You may have missed

Microsoft Addresses Four Critical Zero-Days in November Patch Tuesday Updates

AI Threat Worsening in 2025: Insights from Google Cloud

Lazarus Group’s Code Smuggling Technique Exploits Extended Attributes in macOS

Ethical Hacker or Not? Amazon MOVEit Leaker’s Controversial Claims

Hive0145 Targets Europe with Sophisticated Strela Stealer Campaigns