Advisories · Technology
vjinfotech WP Import Export Lite.
Every CVE that names vjinfotech WP Import Export Lite among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.5 Medium
WP Import Export Lite <= 3.9.30 - Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' Parameter
- vjinfotech WP Import Export Lite
- Server-side request forgery (SSRF)
- CVSS 7.5 High
WP Import Export Lite <= 3.9.29 - Authenticated (Subscriber+) Arbitrary File Upload
- vjinfotech WP Import Export Lite
- Unrestricted file upload
- CVSS 7.5 High
WP Import Export Lite <= 3.9.28 - Authenticated (Subscriber+) Arbitrary File Upload
- vjinfotech WP Import Export Lite
- Unrestricted file upload
- CVSS 6.4 Medium
WP Import Export Lite <= 3.9.27 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
- vjinfotech WP Import Export Lite
- Cross-site scripting (XSS)
- CVSS 4.4 Medium
WordPress WP Import Export Lite & WP Import Export plugin <= 3.9.26 - PHP Object Injection vulnerability
- VJInfotech WP Import Export Lite
- Insecure deserialization
- CVSS 7.5 High
WP Import Export (Lite) <= 3.9.15 Unauthenticated Sensitive Data Disclosure
- vjinfotech WP Import Export
- vjinfotech WP Import Export Lite
- Broken access control