CVE-2015-20067

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The WP Attachment Export WordPress plugin before 0.2.4 does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-862

Affected software

Vendor	Product	Versions
Unknown	WP Attachment Export	>= 0.2.4, < 0.2.4

References

https://github.com/espreto/wpsploit/blob/master/modules/auxiliary/scanner/http/wp_attachment_export_file_download.rbExploit, Third Party Advisory
https://seclists.org/fulldisclosure/2015/Jul/73Exploit, Mailing List, Third Party Advisory
https://wpscan.com/vulnerability/d1a9ed65-baf3-4c85-b077-1f37d8c7793aExploit, Third Party Advisory
https://github.com/espreto/wpsploit/blob/master/modules/auxiliary/scanner/http/wp_attachment_export_file_download.rbExploit, Third Party Advisory
https://seclists.org/fulldisclosure/2015/Jul/73Exploit, Mailing List, Third Party Advisory
https://wpscan.com/vulnerability/d1a9ed65-baf3-4c85-b077-1f37d8c7793aExploit, Third Party Advisory

Timeline

Published: Nov 1, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-20075.0Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.5 Patch 6 allows remote authenticated users to read arbitrary CVE-2015-20084.4IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 and 7.2.x before 7.2.6 includes SSH private keys during backup operations, which allo CVE-2015-20098.8Cross-site request forgery (CSRF) vulnerability in the xmlrpc.cgi service in IBM QRadar SIEM 7.1 before MR2 Patch 11 Interim Fix 02 and 7.2.CVE-2015-201059.6The ClickBank Affiliate Ads WordPress plugin through 1.20 does not have CSRF check when saving its settings, allowing attacker to make logge CVE-2015-201064.8The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings, allowing high privilege users to perform Cross-Site CVE-2015-201077.6In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file.CVE-2015-201089.8xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not use CVE-2015-201095.5end_pattern (called from internal_fnmatch) in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to CVE-2015-20119.0The xmlrpc.cgi Webmin script in IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote authenticated user CVE-2015-201107.5JHipster generator-jhipster before 2.23.0 allows a timing attack against validateToken due to a string comparison that stops at the first ch CVE-2015-201119.8miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values, leading to a buffe CVE-2015-201123.4RLPx 5 has two CTR streams based on the same key, IV, and nonce. This can facilitate decryption on a private network.