6.1
Medium
CVE-2023-3118 The Export All URLs WordPress plugin before 4.6 does not sanitise and escape a parameter before outputting them back…
Description
The Export All URLs WordPress plugin before 4.6 does not sanitise and escape a parameter before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Export All URLs 4.6 | earliest → < 4.6 | 4.6 |
Other CVEs of Export All URLs
The 5 CVEs of Export All URLs →
CVE-2026-2696
The Export All URLs WordPress plugin before 5.1 generates CSV filenames containing posts URLS (including private…
5.3
Medium
CVE-2022-2638
The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which…
Not rated
CVE-2022-0914
The Export All URLs WordPress plugin before 4.3 does not have CSRF in place when exporting data, which could allow…
Not rated
CVE-2022-0892
The Export All URLs WordPress plugin before 4.2 does not sanitise and escape the CSV filename before outputting it…
Not rated