Detections
Analytics

WordPress Media Attachment Enumeration

info Web App Scanning Plugin ID 98224

Language:

Synopsis

WordPress Media Attachment Enumeration

Description

When a file is uploaded to WordPress Media Library it becomes an attachment. Then theses files can be attached to a post or not. If files are confidential until they are published it will be easy to enumerate WordPress attachments and access these files.

Solution

Non published attachments must be reviewed and removed if confidential.

Plugin Details

Severity: Info

ID: 98224

Type: remote

Published: 6/28/2018

Updated: 6/28/2018

Scan Template: basic, full, pci, scan