Advanced Ajax Page Loader Project vulnerabilities
We track 1 vulnerability in Advanced Ajax Page Loader Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 9, 2024.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Advanced Ajax Page Loader Project vulnerabilities
- 8.8 High severity
Advanced AJAX Page Loader: Cross-Site Request Forgery
The Advanced AJAX Page Loader plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 2.7.7. This is due to missing nonce validation in the 'admin_init_AAPL' function and missing file type val