Plugin icon

WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel

wp-all-export

Vulnerabilities:

7

Last Updated:

February 7, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-02-17
Title
WP All Export < 1.4.15 - Unauthenticated Sensitive Information Exposure via PHP Type Juggling
Fixed in
Fixed in 1.4.15
CVSS
3.7 (low)
Published
2023-11-21
Title
WP All Export (Free < 1.4.1, Pro < 1.8.6) - Author+ PHAR Deserialization via CSRF
Fixed in
Fixed in 1.4.1
CVSS
7.6 (high)
Published
2023-11-21
Title
WP All Export (Free < 1.4.0, Pro < 1.8.6) - Admin+ RCE
Fixed in
Fixed in 1.4.0
CVSS
4.7 (medium)
Published
2023-11-21
Title
WP All Export (Free < 1.4.1, Pro < 1.8.6) - Remote Code Execution via CSRF
Fixed in
Fixed in 1.4.1
CVSS
9.6 (critical)
Published
2022-06-14
Title
WP All Export < 1.3.6 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.3.6
CVSS
6.1 (medium)
Published
2022-05-20
Title
Export any WordPress data to XML/CSV < 1.3.5 - Admin+ SQL Injection
Fixed in
Fixed in 1.3.5
CVSS
6.8 (medium)
Published
2021-10-06
Title
WP All Export < 1.3.1 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.3.1
CVSS
3.5 (low)