CVE-2015-20067

HIGH 7.5CVE-2015-20067 · Published 01/11/2021 · updated 17/06/2026

In short

CVE-2015-20067 is a HIGH (CVSS 7.5) vulnerability affecting wp attachment export (wp attachment export project).
Chance of exploitation in the next 30 days (EPSS): 7.7%, higher than 94.7% of all vulnerabilities.
Fix: update to 0.2.4 or later.

Package	Affected versions	Patched versions
wp attachment export wp_attachment_export_project	`< 0.2.4`	`0.2.4`

Description

The WP Attachment Export WordPress plugin before 0.2.4 does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress

References

espreto/wpsploit · Exploit
seclists.org/fulldisclosure/2015/Jul/73 · Exploit
wpscan.com/vulnerability/d1a9ed65-baf3-4c85-b077-1f37d8c7793a · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free