6.1
Moyenne
CVE-2023-3118 The Export All URLs WordPress plugin before 4.6 does not sanitise and escape a parameter before outputting them back…
Description
The Export All URLs WordPress plugin before 4.6 does not sanitise and escape a parameter before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Export All URLs 4.6 | premières → < 4.6 | 4.6 |
Autres CVE de Export All URLs
Les 5 CVE de Export All URLs →
CVE-2026-2696
The Export All URLs WordPress plugin before 5.1 generates CSV filenames containing posts URLS (including private…
5.3
Moyenne
CVE-2022-2638
The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which…
Non notée
CVE-2022-0914
The Export All URLs WordPress plugin before 4.3 does not have CSRF in place when exporting data, which could allow…
Non notée
CVE-2022-0892
The Export All URLs WordPress plugin before 4.2 does not sanitise and escape the CSV filename before outputting it…
Non notée