Vulnerabilities

TI-2025-41646 CVE-2025-68037 · GHSA-5284-5qqc-v2w8

WordPress Export Media URLs plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Atlas Gondal Export Media URLs export-media-urls allows Reflected XSS.This issue affects Export Media URLs: from n/a t…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00314 Published 2026-02-20 No fix listed CWE-79

TI-2023-28162 CVE-2023-51510 · GHSA-5f4p-5jw7-7w7q

WordPress Export Media URLs plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Atlas Gondal Export Media URLs.This issue affects Export Media URLs: from n/a through 1.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00227 Published 2024-03-16 No fix listed CWE-352

TI-2023-02922 CVE-2023-3118 · GHSA-x682-h73h-4x67

Export All URLs < 4.6 - Reflected XSS

MEDIUM 60

The Export All URLs WordPress plugin before 4.6 does not sanitise and escape a parameter before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege use…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00561 Published 2023-07-10 Fixed in 4.6

TI-2022-10739 CVE-2022-27856 · GHSA-6p8j-hm97-v9cx

WordPress Export All URLs Plugin <= 4.1 is vulnerable to Cross Site Scripting (XSS)

LOW 25

Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Atlas Gondal Export All URLs plugin <= 4.1 versions.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00383 Published 2023-05-10 No fix listed CWE-79

TI-2022-02439 CVE-2022-2638 · GHSA-448f-ww7h-5m58

Export All URLs < 4.4 - Admin+ Arbitrary System File Removal

LOW 31

The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.0119 Published 2022-08-29 Fixed in 4.4 CWE-73

TI-2022-11922 CVE-2022-29452 · GHSA-v4c7-53jg-7x9j

WordPress Export All URLs plugin <= 4.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

LOW 23

Authenticated (editor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Export All URLs plugin <= 4.1 at WordPress.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00529 Published 2022-06-15 No fix listed CWE-79

TI-2022-00818 CVE-2022-0914 · GHSA-22p9-v5cc-5f4w

Export All URLs < 4.3 - Private/Draft Post/Page Title Disclosure via CSRF

LOW 30

The Export All URLs WordPress plugin before 4.3 does not have CSRF in place when exporting data, which could allow attackers to make a logged in admin export all posts and pages (including private and draft) into an arbi…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00645 Published 2022-04-11 Fixed in 4.3 CWE-352

TI-2022-00796 CVE-2022-0892 · GHSA-j8w2-v2j7-ff9g

Export All URLs < 4.2 - Reflected Cross-Site Scripting

LOW 29

The Export All URLs WordPress plugin before 4.2 does not sanitise and escape the CSV filename before outputting it back in the page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-04-11 Fixed in 4.2 CWE-79

Vulnerabilities

Filters