Read the docs

Exportfeed

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Exportfeed records in CISA KEV

No Exportfeed vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Exportfeed 1 record LOW Woocommerce Etsy Integration 1 record LOW

Records

1 record in Exportfeed · all components

TI-2021-03073 CVE-2021-4208 · GHSA-jqrq-j354-xc56

ExportFeed <= 2.0.1.0 - Admin+ SQL Injection

Priority LOW 34

The ExportFeed WordPress plugin through 2.0.1.0 does not sanitise and escape the product_id POST parameter before using it in a SQL statement, leading to a SQL injection vulnerability exploitable by high privilege users

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01275 Published 2022-02-21 No fix listed CWE-89
Open these records in search →