title: WP Attachment Export < 0.2.4 - Unauthenticated Posts Download
description: The WP Attachment Export WordPress plugin before 0.2.4 does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress
problem types: CWE-862 Missing Authorization
affected:
{
product: WP Attachment Export
vendor: Unknown
versions:
lessThan: 0.2.4, status: affected, version: 0.2.4, versionType: custom
}