CVE-2016-10929
5.3
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD
Description
The advanced-ajax-page-loader plugin before 2.7.7 for WordPress has no protection against the reading of uploaded files when not logged in.
Affected (1)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| version < 2.7.7 |
Related CWEs
References (2)
Source: cve@mitre.org
Release Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Release Notes
Timeline
No history available yet.