7.2
High
CVE-2023-4724 The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before…
Description
The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not validate and sanitise the `wp_query` parameter which allows an attacker to run arbitrary command on the remote server
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Export any WordPress data to XML/CSV 1.4 | earliest → < 1.4.0 | 1.4.0 |
| WP All Export Pro 1.8 | earliest → < 1.8.6 | 1.8.6 |
Other CVEs of Export any WordPress data to XML/CSV
The 5 CVEs of Export any WordPress data to XML/CSV →
CVE-2023-5882
The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before…
Not rated
CVE-2023-5886
The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before…
Not rated
CVE-2022-1800
The Export any WordPress data to XML/CSV WordPress plugin before 1.3.5 does not sanitize the cpt POST parameter when…
Not rated
CVE-2021-24708
The Export any WordPress data to XML/CSV WordPress plugin before 1.3.1 does not escape its Export's Name before…
Not rated