Skip to contentVjinfotech Wp Import Export Lite vulnerabilities
- unknown wp import export liteWP Import Export Lite < 3.9.35 - Authenticated Privilege Escalation via User ImportCVE-2026-765547.2 High
- unknown wp import export liteWP Import Export Lite < 3.9.33 - Admin+ SSRF via Import URL HandlingCVE-2026-765594.1 Medium
- unknown wp import export liteWP Import Export Lite < 3.9.33 - Contributor+ Stored DOM XSS via Custom Field NamesCVE-2026-765586.8 Medium
- unknown wp import export liteWP Import Export Lite < 3.9.33 - Authenticated SQLi via Import OptionsCVE-2026-765576.8 Medium
- unknown wp import export liteWP Import Export Lite < 3.9.33 - Authenticated SQLi via Export Filter RulesCVE-2026-765566.8 Medium
- unknown wp import export liteWP Import Export Lite < 3.9.33 - Authenticated Sensitive File Disclosure via Existing File Import Path TraversalCVE-2026-76555Public exploit6.8 Medium
- unknown wp import export liteWP Import Export Lite < 3.9.33 - Authenticated Arbitrary Directory Deletion via Template Path TraversalCVE-2026-765536.5 Medium
- unknown wp import export liteWP Import Export Lite < 3.9.33 - Authenticated Arbitrary File Upload via Remote Image ImportCVE-2026-765528.8 High
- unknown wp import export liteWP Import Export Lite < 3.9.33 - Authenticated RCE via Export Field PHP FunctionCVE-2026-765517.2 High
- unknown wp import export liteWP Import Export Lite < 3.9.34 - Authenticated RCE via Export Template Path TraversalCVE-2026-765507.2 High
- vjinfotech wp import export liteWP Import Export Lite <= 3.9.30 - Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' ParameterCVE-2026-113975.5 Medium
- vjinfotech wp import export liteWP Import Export Lite <= 3.9.29 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2025-50617.5 High
- vjinfotech wp import export liteWP Import Export Lite <= 3.9.28 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2025-62077.5 High
- vjinfotech wp import export liteWP Import Export Lite <= 3.9.27 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingCVE-2025-28396.4 Medium
- vjinfotech wp import export liteWordPress WP Import Export Lite & WP Import Export plugin <= 3.9.26 - PHP Object Injection vulnerabilityCVE-2024-313084.4 Medium
- vjinfotech wp import export, wp import export lite +1 moreWP Import Export (Lite) <= 3.9.15 Unauthenticated Sensitive Data DisclosureCVE-2022-0236Public exploit7.5 High