WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
export-categories
Published
2025-10-04
Title
Export Categories <= 1.0 - Missing Authorization
Slug
export-customers-data
Published
2024-12-23
Title
Export Customers Data < 1.2.4 - Reflected Cross-Site Scripting
Slug
export-import-menus
Published
2023-09-04
Title
Export Import Menus < 1.9.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
export-import-menus
Published
2025-01-06
Title
Export Import Menus < 1.9.2 - Missing Authorization to Unauthenticated Menu Export
Slug
export-media-urls
Published
2023-12-27
Title
Export Media URLs < 2.0 - Cross-Site Request Forgery
Slug
export-media-urls
Published
2026-02-04
Title
Export Media URLs < 2.3 - Reflected Cross-Site Scripting
Slug
export-post-info
Published
2022-09-08
Title
Export Post Info < 1.2.0 - Admin+ Stored Cross-Site Scripting
Slug
export-post-info
Published
2022-09-22
Title
Export Post Info < 1.2.1 - Author+ CSV Injection
Slug
export-to-text
Published
2014-08-01
Title
Export to text - Remote File Inclusion
Slug
export-user-data
Published
2026-06-29
Title
Export User Data <= 2.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion via display_name Field
Slug
export-users
Published
2019-10-07
Title
Export Users to CSV < 1.4 - Unauthorised CSV Access
Slug
export-users
Published
2020-02-26
Title
Export Users to CSV <= 1.4.2 - CSV Injection
Slug
export-users-data-csv
Published
2023-11-07
Title
Export Users Data CSV < 2.2 - Improper Neutralization of Formula Elements in a CSV File
Slug
export-users-to-csv
Published
2018-08-16
Title
Export Users to CSV <= 1.1.1 - CSV Injection
Slug
export-woocommerce
Published
2023-11-07
Title
Products, Order & Customers Export for WooCommerce < 2.0.11 - Reflected XSS
Slug
export-woocommerce
Published
2024-01-10
Title
Products & Order Export for WooCommerce < 2.0.9 - Missing Authorization
Slug
export-woocommerce
Published
2024-08-07
Title
Products, Order & Customers Export for WooCommerce < 2.0.12 - Reflected Cross-Site Scripting
Slug
export-woocommerce
Published
2024-10-09
Title
Products, Order & Customers Export for WooCommerce < 2.1.0 - Reflected Cross-Site Scripting
Slug
export-woocommerce-customer-list
Published
2022-11-09
Title
Export customers list CSV for WooCommerce < 2.0.69 - CSV Injection
Slug
export-wp-page-to-static-html
Published
2023-10-25
Title
Export WP Page to Static HTML/CSS < 2.2.0 - Cross-Site Request Forgery via Multiple AJAX Actions
Slug
export-wp-page-to-static-html
Published
2023-11-28
Title
Export WP Page to Static HTML/CSS < 2.2.0 - Missing Authorization via Multiple AJAX Actions
Slug
export-wp-page-to-static-html
Published
2024-06-19
Title
Export WP Page to Static HTML/CSS < 2.2.3 - Open Redirect
Slug
export-wp-page-to-static-html
Published
2025-09-09
Title
Export WP Page to Static HTML/CSS < 4.2.0 - Missing Authorization
Slug
export-wp-page-to-static-html
Published
2025-12-12
Title
Export WP Page to Static HTML & PDF < 5.0.0 - Unauthenticated Cookie Exposure via Log File
Slug
export-wp-page-to-static-html
Published
2026-05-25
Title
Export WordPress Pages to Static HTML & PDF — Static Site Export < 6.0.1 - Cross-Site Request Forgery