Applyonline Application Form Builder And Manager
1 CVEs
product
Monthly
The ApplyOnline WordPress plugin before 2.6.3 does not protect uploaded files during the application process, allowing unauthenticated users to access them and any private information they contain. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
WordPress
Information Disclosure
Applyonline Application Form Builder And Manager
NVD
WPScan
CVSS 3.1
2.7
EPSS
0.3%
EPSS 0%
CVSS 2.7
LOW
POC
Monitor
The ApplyOnline WordPress plugin before 2.6.3 does not protect uploaded files during the application process, allowing unauthenticated users to access them and any private information they contain. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
WordPress
Information Disclosure
Applyonline Application Form Builder And Manager
NVD
WPScan