WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
export-to-text
Published
2014-08-01
Title
Export to text - Remote File Inclusion
Slug
export-users
Published
2019-10-07
Title
Export Users to CSV < 1.4 - Unauthorised CSV Access
Slug
export-users
Published
2020-02-26
Title
Export Users to CSV <= 1.4.2 - CSV Injection
Slug
export-users-data-csv
Published
2023-11-07
Title
Export Users Data CSV < 2.2 - Improper Neutralization of Formula Elements in a CSV File
Slug
export-users-to-csv
Published
2018-08-16
Title
Export Users to CSV <= 1.1.1 - CSV Injection
Slug
export-woocommerce
Published
2023-11-07
Title
Products, Order & Customers Export for WooCommerce < 2.0.11 - Reflected XSS
Slug
export-woocommerce
Published
2024-01-10
Title
Products & Order Export for WooCommerce < 2.0.9 - Missing Authorization
Slug
export-woocommerce
Published
2024-08-07
Title
Products, Order & Customers Export for WooCommerce < 2.0.12 - Reflected Cross-Site Scripting
Slug
export-woocommerce
Published
2024-10-09
Title
Products, Order & Customers Export for WooCommerce < 2.1.0 - Reflected Cross-Site Scripting
Slug
export-woocommerce-customer-list
Published
2022-11-09
Title
Export customers list CSV for WooCommerce < 2.0.69 - CSV Injection
Slug
export-wp-page-to-static-html
Published
2023-10-25
Title
Export WP Page to Static HTML/CSS < 2.2.0 - Cross-Site Request Forgery via Multiple AJAX Actions
Slug
export-wp-page-to-static-html
Published
2023-11-28
Title
Export WP Page to Static HTML/CSS < 2.2.0 - Missing Authorization via Multiple AJAX Actions
Slug
export-wp-page-to-static-html
Published
2024-06-19
Title
Export WP Page to Static HTML/CSS < 2.2.3 - Open Redirect
Slug
export-wp-page-to-static-html
Published
2025-09-09
Title
Export WP Page to Static HTML/CSS < 4.2.0 - Missing Authorization
Slug
export-wp-page-to-static-html
Published
2025-12-12
Title
Export WP Page to Static HTML & PDF < 5.0.0 - Unauthenticated Cookie Exposure via Log File
Slug
exportfeed-for-woocommerce-google-product-feed
Published
2022-03-07
Title
Sync WooCommerce Product feed to Google Shopping <= 1.2.4 - Admin+ SQLi
Slug
exportfeed-for-woocommerce-product-to-etsy
Published
2021-08-16
Title
Multiple Plugins - CSRF Bypass
Slug
exportfeed-for-woocommerce-product-to-etsy
Published
2021-08-16
Title
WooCommerce Etsy Integration < 3.3.2 - Cross-Site Request Forgery
Slug
exportfeed-for-woocommerce-product-to-etsy
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
exportfeed-list-woocommerce-products-on-ebay-store
Published
2021-11-22
Title
ExportFeed <= 2.0.1.0 - Admin+ SQL Injection
Slug
exports-and-reports
Published
2022-06-29
Title
Exports and Reports < 0.9.2 - Contributor+ CSV Injection
Slug
express-pay
Published
2024-11-19
Title
Express Payments Module < 1.1.9 - Unauthenticated SQL Injection via type_id
Slug
express-shop
Published
2021-06-30
Title
Express Shop < 4.0.3 - CSRF Bypass
Slug
expresstechsoftwares-memberpress-discord-add-on
Published
2025-04-14
Title
MemberPress Discord Addon < 1.1.2 - Reflected Cross-Site Scripting
Slug
expresstechsoftwares-memberpress-discord-add-on
Published
2026-01-20
Title
MemberPress Discord Addon <= 1.1.4 - Reflected Cross-Site Scripting