TI-2022-00172 CVE-2022-0236 · GHSA-r35g-5xjr-p2g3WP Import Export (Lite) <= 3.9.15 Unauthenticated Sensitive Data DisclosurePriority MEDIUM 46The WP Import Export WordPress plugin (both free and premium versions) is vulnerable to unauthenticated sensitive data disclosure due to a missing capability check on the download function wpie_process_file_download foun…CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04284 · Published 2022-01-18 · No fix listed CWE-862