Read the docs
TI-2023-04352 Aliases CVE-2023-4724GHSA-gj3x-fvqg-gcjm

WP All Export (Free < 1.4.0, Pro < 1.8.6) - Admin+ RCE

Priority HIGH 67Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not validate and sanitise the `wp_query` parameter which allows an attacker to run arbitrary command on the remote server

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.01151 67th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix Fixed Export any WordPress data to XML/CSV (Unknown): 1.4.0WP All Export Pro (Unknown): 1.8.6

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
UnknownExport any WordPress data to XML/CSVbefore 1.4.01.4.0Patch availableCNA
UnknownWP All Export Probefore 1.8.61.8.6Patch availableCNA
  • Export any WordPress data to XML/CSV VendorUnknown Affected before 1.4.0 Fixed in 1.4.0 Patch available CNA
  • WP All Export Pro VendorUnknown Affected before 1.8.6 Fixed in 1.8.6 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:soflyy:export_any_wordpress_data_to_xml\/csv:*:*:*:*:*:wordpress:*:*before 1.4.0VulnerableSoflyy
cpe:2.3:a:soflyy:wp_all_export:*:*:*:*:pro:wordpress:*:*before 1.8.6VulnerableSoflyy
  • cpe:2.3:a:soflyy:export_any_wordpress_data_to_xml\/csv:*:*:*:*:*:wordpress:*:* Versions before 1.4.0 Vulnerable ·Soflyy
  • cpe:2.3:a:soflyy:wp_all_export:*:*:*:*:pro:wordpress:*:* Versions before 1.8.6 Vulnerable ·Soflyy

Remediation

  • Fix · CNA Export any WordPress data to XML/CSV (Unknown) Fixed in 1.4.0
  • Fix · CNA WP All Export Pro (Unknown) Fixed in 1.8.6

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Export any WordPress data to XML/CSV, WP All Export Pro 1.4.0, 1.8.6

    3 records Highest priority Priority HIGH 2 HIGH, 1 LOW

    Other records, highest priority first

    • TI-2023-05417 WP All Export (Free < 1.4.1, Pro < 1.8.6) - Remote Code Execution via CSRFPriority HIGH 73
    • TI-2023-05420 WP All Export (Free < 1.4.1, Pro < 1.8.6) - Author+ PHAR Deserialization via CSRFPriority LOW 39
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-4724
  2. 2026-10-03 Alias added: GHSA-gj3x-fvqg-gcjm

References

Exploit 1

  • TI-2023-05417 WP All Export (Free < 1.4.1, Pro < 1.8.6) - Remote Code Execution via CSRF CVSS 3.1HIGH 8.8
  • TI-2023-05420 WP All Export (Free < 1.4.1, Pro < 1.8.6) - Author+ PHAR Deserialization via CSRF CVSS 3.1HIGH 8.8
  • TI-2023-06478 WP All Import < 3.7.3 - Admin+ Arbitrary File Upload to RCE CVSS 3.1HIGH 7.2
  • TI-2022-01666 Export any WordPress data to XML/CSV < 1.3.5 - Admin+ SQL Injection CVSS 3.1HIGH 7.2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences