All products
wp-ultimate-exporter
WordPress · Plugin10 reports
| Report | Product | Ecosystem | Severity | Fix status | Last updated |
| Export All Posts, Products, Orders & Users | WP Ultimate Exporter | WordPress CSV Export <= 3.0 - Authenticated (Custom Role+) PHP Object InjectionCVE-2026-103348 |
wp-ultimate-exporter |
WordPress |
High
|
Fix reported |
|
| Export All Posts, Products, Orders, Refunds & Users <= 2.19 - Cross-Site Request Forgery to Sensitive Information ExposureCVE-2025-13606 |
wp-ultimate-exporter |
WordPress |
Medium
|
Fix reported |
|
| Export All Posts, Products, Orders, Refunds & Users <= 2.13 - Unauthenticated PHP Object InjectionCVE-2025-2332 |
wp-ultimate-exporter |
WordPress |
Critical
|
Fix reported |
|
| Export All Posts, Products, Orders, Refunds & Users <= 2.9.3 - Information Disclosure Through Unprotected DirectoryCVE-2024-12315 |
wp-ultimate-exporter |
WordPress |
High
|
Fix reported |
|
| WP Ultimate Exporter <= 2.9 - Authenticated (Admin+) Arbitrary File ReadCVE-2025-24611 |
wp-ultimate-exporter |
WordPress |
Medium
|
Fix reported |
|
| WP Ultimate Exporter <= 2.9.1 - Authenticated (Admin+) Remote Code ExecutionCVE-2024-56278 |
wp-ultimate-exporter |
WordPress |
Medium
|
Fix reported |
|
| WP Ultimate Exporter < 1.1 - Reflected Cross-Site Scripting |
wp-ultimate-exporter |
WordPress |
Medium
|
Fix reported |
|
| WP Ultimate Exporter <= 2.4.1 - Unauthenticated Information DisclosureCVE-2023-2487 |
wp-ultimate-exporter |
WordPress |
Medium
|
Fix reported |
|
| Export WordPress Data with Advanced Filters <= 1.4.1 - Cross-Site Request ForgeryCVE-2018-20968 |
wp-ultimate-exporter |
WordPress |
High
|
Fix reported |
|
| Export WordPress Data with Advanced Filters < 1.2 - SQL InjectionCVE-2016-11000 |
wp-ultimate-exporter |
WordPress |
Critical
|
Fix reported |
|