Read the docs

Atlas Gondal

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Atlas Gondal records in CISA KEV

No Atlas Gondal vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Export All Urls 7 records MEDIUM

Records

8 records

TI-2023-02922 CVE-2023-3118 · GHSA-x682-h73h-4x67

Export All URLs < 4.6 - Reflected XSS

Priority MEDIUM 60

The Export All URLs WordPress plugin before 4.6 does not sanitise and escape a parameter before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege use…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00561 Published 2023-07-10 Fixed in 4.6
TI-2025-41646 CVE-2025-68037 · GHSA-5284-5qqc-v2w8

WordPress Export Media URLs plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Atlas Gondal Export Media URLs export-media-urls allows Reflected XSS.This issue affects Export Media URLs: from n/a t…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00314 Published 2026-02-20 No fix listed CWE-79
TI-2022-02439 CVE-2022-2638 · GHSA-448f-ww7h-5m58

Export All URLs < 4.4 - Admin+ Arbitrary System File Removal

Priority LOW 31

The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.0119 Published 2022-08-29 Fixed in 4.4 CWE-73
TI-2022-00818 CVE-2022-0914 · GHSA-22p9-v5cc-5f4w

Export All URLs < 4.3 - Private/Draft Post/Page Title Disclosure via CSRF

Priority LOW 30

The Export All URLs WordPress plugin before 4.3 does not have CSRF in place when exporting data, which could allow attackers to make a logged in admin export all posts and pages (including private and draft) into an arbi…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00645 Published 2022-04-11 Fixed in 4.3 CWE-352
TI-2022-00796 CVE-2022-0892 · GHSA-j8w2-v2j7-ff9g

Export All URLs < 4.2 - Reflected Cross-Site Scripting

Priority LOW 29

The Export All URLs WordPress plugin before 4.2 does not sanitise and escape the CSV filename before outputting it back in the page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-04-11 Fixed in 4.2 CWE-79
Open these records in search →