Advisories · Technology

Smackcoders Inc. WP Ultimate Exporter.

Every CVE that names Smackcoders Inc. WP Ultimate Exporter among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-103348 CVE record

CVSS 7.2 High

WordPress WP Ultimate Exporter plugin <= 3.0 - PHP Object Injection vulnerability
- Smackcoders Inc. WP Ultimate Exporter
- Insecure deserialization
Not analysed yet 5 Oct 2026
CVE-2025-24611 CVE record

CVSS 4.9 Medium

WordPress Export All Posts, Products, Orders, Refunds & Users Plugin <= 2.9 - Arbitrary File Read vulnerability
- Smackcoders Inc., WP Ultimate Exporter
- Path traversal
Not analysed yet 24 Jan 2025
CVE-2024-56278 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WordPress WP Ultimate Exporter plugin <= 2.9.1 - Remote Code Execution (RCE) vulnerability
- Smackcoders Inc., WP Ultimate Exporter
- Code injection
Not analysed yet 7 Jan 2025