The advanced-ajax-page-loader plugin before 2.7.7 for WordPress has no protection against the reading of uploaded files when not logged in.
Affected vendor
advanced ajax page loader projectAffected product
advanced ajax page loaderCoverage
Single affected product entry
CVSS
5.3
MEDIUM
Published
Aug 22, 2019

