Advisories · Technology
wpazleen Post Export Import with Media.
Every CVE that names wpazleen Post Export Import with Media among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.9 Medium
Post Export Import with Media <= 1.17.2 - Authenticated (Administrator+) Path Traversal via 'theme_slug' Parameter
- wpazleen Post Export Import with Media
- Path traversal
- CVSS 7.2 High
Post Export Import with Media <= 1.17.1 - Authenticated (Administrator+) PHP Object Injection via 'page_data[meta]' Parameter
- wpazleen Post Export Import with Media
- Insecure deserialization
- CVSS 4.9 Medium
Post Export Import with Media <= 1.17.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'file_path' Parameter in media_metadata.json
- wpazleen Post Export Import with Media
- Path traversal
- CVSS 7.2 High
Post Export Import with Media <= 1.13.1 - Authenticated (Administrator+) Arbitrary File Upload via Trailing-Dot Filename Bypass in ZIP Media Import
- wpazleen Post Export Import with Media
- Unrestricted file upload