CVE-2016-10929

The advanced-ajax-page-loader plugin before 2.7.7 for WordPress has no protection against the reading of uploaded files when not logged in.

Score

CVSS 3.0 5.3 Medium

Status

Modified - cve@mitre.org

Published

2019-08-22

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Advanced Ajax Page Loader (Advanced Ajax Page Loader Project)

References

• https://wordpress.org/plugins/advanced-ajax-page-loader/#developers