Soflyy
Soflyy WP ALL Export: vulnerabilidades y CVE
Soflyy WP ALL Export tiene 8 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE8
Últimos 12 meses1
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-1582 | Baja (3.7) | 0.30% | — | 18 feb 2026 | The WP All Export plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.14 via the export download endpoint. This is due to a PHP type juggling vulnerability in… |
| CVE-2024-7425 | Alta (7.2) | 0.41% | — | 7 feb 2025 | The WP ALL Export Pro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to improper user input validation and sanitization in all versions up to, and… |
| CVE-2024-7419 | Alta (8.8) | 0.62% | — | 7 feb 2025 | The WP ALL Export Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.9.1 via the custom export fields. This is due to the missing input validation and sanitization of… |
| CVE-2023-5886 | Alta (8.8) | 0.55% | — | 18 dic 2023 | The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers with the… |
| CVE-2023-5882 | Alta (8.8) | 0.55% | — | 18 dic 2023 | The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers to make… |
| CVE-2023-4724 | Alta (7.2) | 1.2% | — | 18 dic 2023 | The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not validate and sanitise the `wp_query` parameter which allows an attacker to run arbitrary… |
| CVE-2022-3395 | Alta (8.8) | 1.0% | — | 25 oct 2022 | The WP All Export Pro WordPress plugin before 1.7.9 uses the contents of the cc_sql POST parameter directly as a database query, allowing users which has been given permission to run exports to execute arbitrary SQL… |
| CVE-2022-3394 | Alta (7.2) | 1.5% | — | 25 oct 2022 | The WP All Export Pro WordPress plugin before 1.7.9 does not limit some functionality during exports only to users with the Administrator role, allowing any logged in user which has been given privileges to perform… |