WordPress Plugin Vulnerabilities

Advanced Ajax Page Loader < 2.7.7 - Unauthenticated Uploaded File Disclosure

Description

The Advanced AJAX Page Loader WordPress plugin was affected by an Unauthenticated Uploaded File Disclosure security vulnerability.

Affects Plugins

Plugin icon
advanced-ajax-page-loader
Fixed in 2.7.7

References

CVE
CVE-2016-10929

Classification

Type
AUTHBYPASS
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-287
CVSS
5.3 (medium)

Miscellaneous

Verified
No
WPVDB ID
d094ecf3-904d-48dc-b2ec-e4fe1d1f378f

Timeline

Publicly Published
2016-07-03 (about 9 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-07-24
Title
PowerPack for Beaver Builder < 2.33.1 - Contributor+ Privilege Escalation
Published
2024-10-25
Title
MaanStore API <= 1.0.1 - Authentication Bypass
Published
2024-04-29
Title
Customer Email Verification for WooCommerce < 2.7.5 - Authentication Bypass
Published
2014-09-17
Title
Custom Contact Forms < 5.1.0.4 - Unauthenticated Database Import/Export
Published
2026-02-11
Title
AdForest < 6.0.13 - Authentication Bypass