Aspose Doc Exporter Vulnerabilities

The Aspose.Words – Import and Export word documents plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 6.3.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorize...

CVSS:

4.3

Affected:

up to 6.3.1

Fix:

No patched version reported

Disclosed:

Apr 12, 2024

CVE-2024-32146 on NVD →

The Aspose.Words – Import and Export word documents plugin for WordPress is vulnerable to Arbitrary File Download in versions up to, and including, 1.0. This is due to insufficient input sanitization of the 'file' parameter. This makes it possible for unauthenticated attackers to download any file, including configurat...

CVSS:

7.5

Affected:

up to 2.0

Fixed in:

2.0

Disclosed:

Mar 29, 2015