All products

wp-import-export-lite

WordPress · Plugin
16 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Import Export Lite <= 3.9.32 - Authenticated (Admin+) SQL InjectionCVE-2026-76557 wp-import-export-lite WordPress Medium Fix reported
Import Export Lite <= 3.9.32 - Authenticated (Admin+) SQL InjectionCVE-2026-76556 wp-import-export-lite WordPress Medium Fix reported
Import Export Lite <= 3.9.32 - Authenticated (Admin+) Arbitrary File ReadCVE-2026-76555 wp-import-export-lite WordPress Medium Fix reported
Import Export Lite <= 3.9.34 - Authenticated (Admin+) Privilege EscalationCVE-2026-76554 wp-import-export-lite WordPress Medium Fix reported
Import Export Lite <= 3.9.32 - Authenticated (Admin+) Path Traversal to Arbitrary Directory DeletionCVE-2026-76553 wp-import-export-lite WordPress Medium Fix reported
Import Export Lite <= 3.9.32 - Authenticated (Admin+) Arbitrary File UploadCVE-2026-76552 wp-import-export-lite WordPress High Fix reported
Import Export Lite <= 3.9.32 - Authenticated (Admin+) Remote Code ExecutionCVE-2026-76551 wp-import-export-lite WordPress High Fix reported
Import Export Lite <= 3.9.33 - Authenticated (Admin+) Remote Code ExecutionCVE-2026-76550 wp-import-export-lite WordPress High Fix reported
Import Export Lite <= 3.9.32 - Authenticated (Administrator+) Server-Side Request ForgeryCVE-2026-76559 wp-import-export-lite WordPress Medium Fix reported
Import Export Lite <= 3.9.32 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-76558 wp-import-export-lite WordPress Medium Fix reported
WP Import Export Lite <= 3.9.30 - Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' ParameterCVE-2026-11397 wp-import-export-lite WordPress Medium Fix reported
WP Import Export Lite <= 3.9.28 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2025-6207 wp-import-export-lite WordPress High Fix reported
WP Import Export Lite <= 3.9.29 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2025-5061 wp-import-export-lite WordPress High Fix reported
WP Import Export Lite <= 3.9.27 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingCVE-2025-2839 wp-import-export-lite WordPress Medium Fix reported
WP Import Export Lite <= 3.9.26 - Authenticated (Administrator+) PHP Object InjectionCVE-2024-31308 wp-import-export-lite WordPress High Fix reported
WP Import Export Lite & WP Import Export <= 3.9.15 - Unauthenticated Sensitive Data DisclosureCVE-2022-0236 wp-import-export-lite WordPress High Fix reported