Unknown WP Import Export Lite
10 known vulnerabilities in Unknown WP Import Export Lite, with patch priority, exploit likelihood and the news covering them.
Latest vulnerabilities
- CVE-2026-76554 CVSS 7.2 high The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an import is permitted to create or modify…
- CVE-2026-76559 CVSS 4.1 medium The WP Import Export Lite WordPress plugin before 3.9.33 does not properly validate URLs before requesting them during the import process…
- CVE-2026-76558 CVSS 6.8 medium The WP Import Export Lite WordPress plugin before 3.9.33 does not escape custom field names retrieved from the database before inserting…
- CVE-2026-76557 CVSS 6.8 medium The WP Import Export Lite WordPress plugin before 3.9.33 does not properly sanitise and escape some import configuration values before…
- CVE-2026-76556 CVSS 6.8 medium The WP Import Export Lite WordPress plugin before 3.9.33 does not properly sanitise and escape some export filter values before using them…
- CVE-2026-76555 CVSS 6.8 medium The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a user-supplied file path before reading it and copying it into…
- CVE-2026-76553 CVSS 6.5 medium The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a path taken from stored, user-supplied data before recursively…
- CVE-2026-76552 CVSS 8.8 high The WP Import Export Lite WordPress plugin before 3.9.33 does not validate the type, extension or content of files it retrieves from a…
- CVE-2026-76551 CVSS 7.2 high The WP Import Export Lite WordPress plugin before 3.9.33 does not restrict which PHP function may be applied to exported field values…
- CVE-2026-76550 CVSS 7.2 high The WP Import Export Lite WordPress plugin before 3.9.34 does not validate a user-supplied output path when writing export files, allowing…