Vjinfotech Wp Import Export vulnerabilities

• unknown wp import export lite WP Import Export Lite < 3.9.35 - Authenticated Privilege Escalation via User Import CVE-2026-76554 7.2 HighSeptember 19, 2026
• unknown wp import export lite WP Import Export Lite < 3.9.33 - Admin+ SSRF via Import URL Handling CVE-2026-76559 4.1 MediumSeptember 16, 2026
• unknown wp import export lite WP Import Export Lite < 3.9.33 - Contributor+ Stored DOM XSS via Custom Field Names CVE-2026-76558 6.8 MediumSeptember 16, 2026
• unknown wp import export lite WP Import Export Lite < 3.9.33 - Authenticated SQLi via Import Options CVE-2026-76557 6.8 MediumSeptember 16, 2026
• unknown wp import export lite WP Import Export Lite < 3.9.33 - Authenticated SQLi via Export Filter Rules CVE-2026-76556 6.8 MediumSeptember 16, 2026
• unknown wp import export lite WP Import Export Lite < 3.9.33 - Authenticated Sensitive File Disclosure via Existing File Import Path Traversal CVE-2026-76555 Public exploit 6.8 MediumSeptember 16, 2026
• unknown wp import export lite WP Import Export Lite < 3.9.33 - Authenticated Arbitrary Directory Deletion via Template Path Traversal CVE-2026-76553 6.5 MediumSeptember 16, 2026
• unknown wp import export lite WP Import Export Lite < 3.9.33 - Authenticated Arbitrary File Upload via Remote Image Import CVE-2026-76552 8.8 HighSeptember 16, 2026
• unknown wp import export lite WP Import Export Lite < 3.9.33 - Authenticated RCE via Export Field PHP Function CVE-2026-76551 7.2 HighSeptember 16, 2026
• unknown wp import export lite WP Import Export Lite < 3.9.34 - Authenticated RCE via Export Template Path Traversal CVE-2026-76550 7.2 HighSeptember 16, 2026
• vjinfotech wp import export lite WP Import Export Lite <= 3.9.30 - Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' Parameter CVE-2026-11397 5.5 MediumJuly 3, 2026
• vjinfotech wp import export lite WP Import Export Lite <= 3.9.29 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2025-5061 7.5 HighAugust 5, 2025
• vjinfotech wp import export lite WP Import Export Lite <= 3.9.28 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2025-6207 7.5 HighAugust 5, 2025
• vjinfotech wp import export lite WP Import Export Lite <= 3.9.27 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CVE-2025-2839 6.4 MediumApril 22, 2025
• vjinfotech wp import export lite WordPress WP Import Export Lite & WP Import Export plugin <= 3.9.26 - PHP Object Injection vulnerability CVE-2024-31308 4.4 MediumApril 7, 2024
• vjinfotech wp import export, wp import export lite +1 more WP Import Export (Lite) <= 3.9.15 Unauthenticated Sensitive Data Disclosure CVE-2022-0236 Public exploit 7.5 HighJanuary 18, 2022