Unknown Wp Import Export Lite vulnerabilities

• unknown wp import export lite WP Import Export Lite < 3.9.35 - Authenticated Privilege Escalation via User Import CVE-2026-76554 7.2 HighSeptember 19, 2026
• unknown wp import export lite WP Import Export Lite < 3.9.33 - Admin+ SSRF via Import URL Handling CVE-2026-76559 4.1 MediumSeptember 16, 2026
• unknown wp import export lite WP Import Export Lite < 3.9.33 - Contributor+ Stored DOM XSS via Custom Field Names CVE-2026-76558 6.8 MediumSeptember 16, 2026
• unknown wp import export lite WP Import Export Lite < 3.9.33 - Authenticated SQLi via Import Options CVE-2026-76557 6.8 MediumSeptember 16, 2026
• unknown wp import export lite WP Import Export Lite < 3.9.33 - Authenticated SQLi via Export Filter Rules CVE-2026-76556 6.8 MediumSeptember 16, 2026
• unknown wp import export lite WP Import Export Lite < 3.9.33 - Authenticated Sensitive File Disclosure via Existing File Import Path Traversal CVE-2026-76555 Public exploit 6.8 MediumSeptember 16, 2026
• unknown wp import export lite WP Import Export Lite < 3.9.33 - Authenticated Arbitrary Directory Deletion via Template Path Traversal CVE-2026-76553 6.5 MediumSeptember 16, 2026
• unknown wp import export lite WP Import Export Lite < 3.9.33 - Authenticated Arbitrary File Upload via Remote Image Import CVE-2026-76552 8.8 HighSeptember 16, 2026
• unknown wp import export lite WP Import Export Lite < 3.9.33 - Authenticated RCE via Export Field PHP Function CVE-2026-76551 7.2 HighSeptember 16, 2026
• unknown wp import export lite WP Import Export Lite < 3.9.34 - Authenticated RCE via Export Template Path Traversal CVE-2026-76550 7.2 HighSeptember 16, 2026