Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
soflyy wp all export vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2022-3395
The WP All Export Pro WordPress plugin prior to 1.7.9 uses the contents of the cc_sql POST parameter directly as a database query, allowing users which has been given permission to run exports to execute arbitrary SQL statements, leading to a SQL Injection vulnerability. By defau...
Soflyy Wp All Export
NA
CVE-2022-3394
The WP All Export Pro WordPress plugin prior to 1.7.9 does not limit some functionality during exports only to users with the Administrator role, allowing any logged in user which has been given privileges to perform exports to execute arbitrary code on the site. By default only ...
Soflyy Wp All Export
NA
CVE-2023-5882
The Export any WordPress data to XML/CSV WordPress plugin prior to 1.4.0, WP All Export Pro WordPress plugin prior to 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing malicious users to make logged in users perform unwanted actions leading to remo...
Soflyy Wp All Export
Soflyy Export Any Wordpress Data To Xml\\/csv
NA
CVE-2023-5886
The Export any WordPress data to XML/CSV WordPress plugin prior to 1.4.0, WP All Export Pro WordPress plugin prior to 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers with the ability to upload files to make logged in users perform unwan...
Soflyy Wp All Export
Soflyy Export Any Wordpress Data To Xml\\/csv
NA
CVE-2023-4724
The Export any WordPress data to XML/CSV WordPress plugin prior to 1.4.0, WP All Export Pro WordPress plugin prior to 1.8.6 does not validate and sanitise the `wp_query` parameter which allows an malicious user to run arbitrary command on the remote server
Soflyy Export Any Wordpress Data To Xml\\/csv
Soflyy Wp All Export
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22460
CVE-2024-4646
CVE-2024-29212
IMAP
CVE-2023-36672
CVE-2024-34547
command injection
CVE-2024-4651
stored XSS
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started