Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Export any WordPress data to XML/CSV, WP All Export Pro 1.4.0, 1.8.6 Clear all filters
TI-2023-05417 CVE-2023-5882 · GHSA-7xp2-7hw7-rv8q

WP All Export (Free < 1.4.1, Pro < 1.8.6) - Remote Code Execution via CSRF

Priority HIGH 73

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers to make logged…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0055 Published 2023-12-18 Fixed in 1.4.0, 1.8.6 CWE-352
TI-2023-04352 CVE-2023-4724 · GHSA-gj3x-fvqg-gcjm

WP All Export (Free < 1.4.0, Pro < 1.8.6) - Admin+ RCE

Priority HIGH 67

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not validate and sanitise the `wp_query` parameter which allows an attacker to run arbitrary co…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01151 Published 2023-12-18 Fixed in 1.4.0, 1.8.6
TI-2023-05420 CVE-2023-5886 · GHSA-qgv4-xfrj-hvp7

WP All Export (Free < 1.4.1, Pro < 1.8.6) - Author+ PHAR Deserialization via CSRF

Priority LOW 39

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers with the abili…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0055 Published 2023-12-18 Fixed in 1.4.0, 1.8.6 CWE-352