7.2
Élevée
CVE-2023-4724 The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before…
Description
The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not validate and sanitise the `wp_query` parameter which allows an attacker to run arbitrary command on the remote server
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Export any WordPress data to XML/CSV 1.4 | premières → < 1.4.0 | 1.4.0 |
| WP All Export Pro 1.8 | premières → < 1.8.6 | 1.8.6 |
Autres CVE de Export any WordPress data to XML/CSV
Les 5 CVE de Export any WordPress data to XML/CSV →
CVE-2023-5882
The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before…
Non notée
CVE-2023-5886
The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before…
Non notée
CVE-2022-1800
The Export any WordPress data to XML/CSV WordPress plugin before 1.3.5 does not sanitize the cpt POST parameter when…
Non notée
CVE-2021-24708
The Export any WordPress data to XML/CSV WordPress plugin before 1.3.1 does not escape its Export's Name before…
Non notée