Read the docs

wpazleen

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

wpazleen records in CISA KEV

No wpazleen vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2026-83523 CVE-2026-118235 · GHSA-wjww-5gvr-r96j

Arbitrary file upload in SimpleForm WordPress plugin

Priority MEDIUM 50

The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.10.2 via the handle_upload functio…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0074 Published 2026-10-31 No fix listed CWE-434
TI-2026-73817 CVE-2026-104748 · GHSA-5hqh-jvjf-mpvw

SimpleForm Unauthenticated Privilege Escalation via wp_capabilities

Priority MEDIUM 50

The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the `wp_ajax_no…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00833 Published 2026-10-14 No fix listed CWE-269
TI-2026-11366 CVE-2026-13430 · GHSA-mxq7-wpp5-2fc9

Unrestricted file upload in wpazleen Post Export Import with Media

Priority LOW 36

The Post Export Import with Media plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.13.1 via the import_media_file_secure function.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01149 Published 2026-07-10 No fix listed CWE-434
TI-2026-73821 CVE-2026-104764 · GHSA-g9fm-v4gr-h48h

Post Export Import with Media: Authenticated PHP Object Injection

Priority LOW 35

The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.17.1 via deserialization of untrusted input .

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00625 Published 2026-10-14 No fix listed CWE-502
TI-2026-76039 CVE-2026-110268 · GHSA-4rjp-9x4j-xqhv

Path traversal in Post Export Import with Media WordPress plugin

Priority LOW 24

The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.2 via the 'theme_slug' parameter.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00766 Published 2026-10-17 No fix listed CWE-22
TI-2026-70261 CVE-2026-104763 · GHSA-vxwp-9pcg-465r

Path traversal in Post Export Import with Media allows file reads

Priority LOW 24

The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'file_path' parameter parameter.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00732 Published 2026-10-10 No fix listed CWE-22
Open these records in search →