Read the docs

vjinfotech

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

vjinfotech records in CISA KEV

No vjinfotech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Import Export Lite 5 records MEDIUM Woo Custom And Sequential Order Number 1 record LOW Wp Import Export 1 record MEDIUM

Records

5 records in Wp Import Export Lite · all components

TI-2022-00172 CVE-2022-0236 · GHSA-r35g-5xjr-p2g3

WP Import Export (Lite) <= 3.9.15 Unauthenticated Sensitive Data Disclosure

Priority MEDIUM 46

The WP Import Export WordPress plugin (both free and premium versions) is vulnerable to unauthenticated sensitive data disclosure due to a missing capability check on the download function wpie_process_file_download foun…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04284 Published 2022-01-18 No fix listed CWE-862
TI-2025-05615 CVE-2025-6207 · GHSA-2grm-wcfh-hhgj

WP Import Export Lite <= 3.9.28 - Authenticated (Subscriber+) Arbitrary File Upload

Priority MEDIUM 42

The WP Import Export Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpie_tempalte_import' function in all versions up to, and including, 3.9.28.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00813 Published 2025-08-05 No fix listed CWE-434
TI-2025-04537 CVE-2025-5061 · GHSA-7c74-cfcr-227g

WP Import Export Lite <= 3.9.29 - Authenticated (Subscriber+) Arbitrary File Upload

Priority MEDIUM 42

The WP Import Export Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpie_parse_upload_data' function in all versions up to, and including, 3.9.29.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00822 Published 2025-08-05 No fix listed CWE-434
TI-2025-02479 CVE-2025-2839 · GHSA-267m-4582-fw66

WP Import Export Lite <= 3.9.27 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

Priority LOW 28

The WP Import Export Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpiePreviewData’ function in all versions up to, and including, 3.9.27 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00285 Published 2025-04-22 No fix listed CWE-79
Open these records in search →