Wp All Export
Vendor:
First CVE: Oct 25, 2022 · Active for 3 years
7
Total CVEs
More Total CVEs than 83% of tracked products
2.3
Avg CVEs / Year
Higher CVE frequency than 73% of tracked products
8.1
Avg CVSS
Higher Avg CVSS than 71% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Wp All Export over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 25, 2022
3 years ago
Most Recent CVE
Feb 7, 2025
534 days ago
CVE Severity & Scoring
Wp All Export7 CVEs
100%
All CVEs352,713 CVEs
45%
40%
11%
High
Attack Vector
Local0 (0.0%)
Network7 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None4 (57.1%)
Unknown0 (0.0%)
Required3 (42.9%)
Privileges Required
Low1 (14.3%)
High3 (42.9%)
None3 (42.9%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-3395HIGH The WP All Export Pro WordPress plugin before 1.7.9 uses the contents of the cc_sql POST parameter directly as a database query, allowing users which has been given permission to r | Oct 25, 2022 | 8.8 | 27 | NO | NO |
CVE-2024-7419HIGH The WP ALL Export Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.9.1 via the custom export fields. This is due to the missi | Feb 7, 2025 | 8.8 | 24 | NO | NO |
CVE-2023-5886HIGH The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check nonce tokens early enough in the request life | Dec 18, 2023 | 8.8 | 24 | NO | NO |
CVE-2022-3394HIGH The WP All Export Pro WordPress plugin before 1.7.9 does not limit some functionality during exports only to users with the Administrator role, allowing any logged in user which ha | Oct 25, 2022 | 7.2 | 24 | NO | NO |
CVE-2023-5882HIGH The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check nonce tokens early enough in the request life | Dec 18, 2023 | 8.8 | 23 | NO | NO |
CVE-2023-4724HIGH The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not validate and sanitise the `wp_query` parameter whic | Dec 18, 2023 | 7.2 | 22 | NO | NO |
CVE-2024-7425HIGH The WP ALL Export Pro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to improper user input validation and saniti | Feb 7, 2025 | 7.2 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Wp All Export
Top CWEs
Versions
No cataloged versions.