WordPress Plugin Vulnerabilities

WP Ultimate Exporter < 1.4.2 - CSRF

Description

The Export WordPress Data with Advanced Filters WordPress plugin was affected by a CSRF security vulnerability.

Affects Plugins

Plugin icon
wp-ultimate-exporter
Fixed in 1.4.2

References

CVE
CVE-2018-20968

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
8.8 (high)

Miscellaneous

Verified
No
WPVDB ID
50668839-626b-4e62-a855-94d24f1834bc

Timeline

Publicly Published
2018-12-19 (about 7 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2022-09-01
Title
CallRail Phone Call Tracking < 0.4.10 - Stored XSS via CSRF
Published
2024-04-05
Title
WordPress Comments Import & Export < 2.3.6 - Cross-Site Request Forgery
Published
2025-06-05
Title
Quick Event Calendar <= 1.4.9 - Cross-Site Request Forgery
Published
2026-03-10
Title
LatePoint – Calendar Booking Plugin for Appointments and Events < 5.2.8 - Cross-Site Request Forgery in Booking Form Settings Update to Stored Cross-Site Scripting
Published
2024-11-22
Title
Favicon My Blog <= 1.0.2 - Cross-Site Request Forgery