Plugin icon

WP Import Export Lite

wp-import-export-lite

Vulnerabilities:

7

Last Updated:

August 4, 2025

Active Installs:

50000

Published
Title
Fixed in
CVSS
Published
2025-08-04
Title
WP Import Export Lite < 3.9.30 - Authenticated (Subscriber+) Arbitrary File Upload
Fixed in
Fixed in 3.9.30
CVSS
7.5 (high)
Published
2025-08-04
Title
WP Import Export Lite < 3.9.29 - Authenticated (Subscriber+) Arbitrary File Upload
Fixed in
Fixed in 3.9.29
CVSS
7.5 (high)
Published
2025-04-21
Title
WP Import Export Lite < 3.9.28 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Fixed in
Fixed in 3.9.28
CVSS
6.4 (medium)
Published
2024-04-05
Title
WP Import Export Lite < 3.9.27 - Authenticated (Administrator+) PHP Object Injection
Fixed in
Fixed in 3.9.27
CVSS
7.2 (high)
Published
2022-01-14
Title
WP Import Export < 3.9.16 - Unauthenticated Sensitive Data Disclosure
Fixed in
Fixed in 3.9.16
CVSS
7.5 (high)
Published
2021-09-20
Title
WP Import Export Lite < 3.9.5 - Subscriber+ Arbitrary Blog Options Update
Fixed in
Fixed in 3.9.5
CVSS
8.1 (high)
Published
2021-09-20
Title
WP Import Export Lite < 3.9.5 - Subscriber+ Extensions Update
Fixed in
Fixed in 3.9.5
CVSS
5.4 (medium)