Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
soflyy wp all export vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2022-3394
The WP All Export Pro WordPress plugin prior to 1.7.9 does not limit some functionality during exports only to users with the Administrator role, allowing any logged in user which has been given privileges to perform exports to execute arbitrary code on the site. By default only ...
Soflyy Wp All Export
NA
CVE-2022-3395
The WP All Export Pro WordPress plugin prior to 1.7.9 uses the contents of the cc_sql POST parameter directly as a database query, allowing users which has been given permission to run exports to execute arbitrary SQL statements, leading to a SQL Injection vulnerability. By defau...
Soflyy Wp All Export
NA
CVE-2023-4724
The Export any WordPress data to XML/CSV WordPress plugin prior to 1.4.0, WP All Export Pro WordPress plugin prior to 1.8.6 does not validate and sanitise the `wp_query` parameter which allows an malicious user to run arbitrary command on the remote server
Soflyy Export Any Wordpress Data To Xml\\/csv
Soflyy Wp All Export
NA
CVE-2023-5882
The Export any WordPress data to XML/CSV WordPress plugin prior to 1.4.0, WP All Export Pro WordPress plugin prior to 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing malicious users to make logged in users perform unwanted actions leading to remo...
Soflyy Wp All Export
Soflyy Export Any Wordpress Data To Xml\\/csv
NA
CVE-2023-5886
The Export any WordPress data to XML/CSV WordPress plugin prior to 1.4.0, WP All Export Pro WordPress plugin prior to 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers with the ability to upload files to make logged in users perform unwan...
Soflyy Wp All Export
Soflyy Export Any Wordpress Data To Xml\\/csv
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32976
CVE-2024-33557
CVE-2024-36801
CVE-2024-35654
authentication bypass
CVE-2024-24919
CSRF
code execution
CVE-2024-27348
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started