Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WP All Export Pro 1.7.9 Clear all filters
TI-2022-03138 CVE-2022-3395 · GHSA-m95q-f33m-cqcq

WP All Export Pro < 1.7.9 - Authenticated SQLi

Priority HIGH 73

The WP All Export Pro WordPress plugin before 1.7.9 uses the contents of the cc_sql POST parameter directly as a database query, allowing users which has been given permission to run exports to execute arbitrary SQL stat…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01246 Published 2022-10-25 Fixed in 1.7.9 CWE-89
TI-2022-03137 CVE-2022-3394 · GHSA-vh4p-xvjw-q6rc

WP All Export Pro < 1.7.9 - Authenticated Code Injection

Priority HIGH 67

The WP All Export Pro WordPress plugin before 1.7.9 does not limit some functionality during exports only to users with the Administrator role, allowing any logged in user which has been given privileges to perform expor…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02021 Published 2022-10-25 Fixed in 1.7.9 CWE-94