Plugin icon

Export All Posts, Products, Orders, Refunds & Users

wp-ultimate-exporter

Vulnerabilities:

9

Last Updated:

March 5, 2026

Active Installs:

9000

Published
Title
Fixed in
CVSS
Published
2025-12-01
Title
Export All Posts, Products, Orders, Refunds & Users < 2.20 - Cross-Site Request Forgery to Sensitive Information Exposure
Fixed in
Fixed in 2.20
CVSS
6.5 (medium)
Published
2025-03-26
Title
Export All Posts, Products, Orders, Refunds & Users < 2.14 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 2.14
CVSS
9.8 (critical)
Published
2025-02-11
Title
Export All Posts, Products, Orders, Refunds & Users < 2.10 - Information Disclosure Through Unprotected Directory
Fixed in
Fixed in 2.10
CVSS
7.5 (high)
Published
2025-01-24
Title
WP Ultimate Exporter < 2.9.1 - Authenticated (Admin+) Arbitrary File Read
Fixed in
Fixed in 2.9.1
CVSS
4.9 (medium)
Published
2025-01-03
Title
WP Ultimate Exporter < 2.9.2 - Authenticated (Admin+) Remote Code Execution
Fixed in
Fixed in 2.9.2
CVSS
4.1 (medium)
Published
2023-10-03
Title
WP Ultimate Exporter < 2.4.2 - Unauthenticated Information Disclosure
Fixed in
Fixed in 2.4.2
CVSS
5.3 (medium)
Published
2018-12-19
Title
WP Ultimate Exporter < 1.4.2 - CSRF
Fixed in
Fixed in 1.4.2
CVSS
8.8 (high)
Published
2016-02-25
Title
WP Ultimate Exporter <= 1.1 - Unauthenticated SQL Injection
Fixed in
Fixed in 1.2
CVSS
9.8 (critical)
Published
2016-02-24
Title
WP Ultimate Exporter 1.0.0 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.1
CVSS
n/a