2.7
Low
CVE-2024-10098 The ApplyOnline WordPress plugin before 2.6.3 does not protect uploaded files during the application process,…
Description
The ApplyOnline WordPress plugin before 2.6.3 does not protect uploaded files during the application process, allowing unauthenticated users to access them and any private information they contain
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ApplyOnline 2.6 | earliest → < 2.6.3 | 2.6.3 |