CVE Database /
CVE-2023-5886
CVE · High
CVE-2023-5886 — WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel [wp-all-export] < 1.4.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-5886
|
WP All Export – Drag & Drop Export to Any Custom CSV, XML & Excel [wp-all-export] < 1.4.1 |
Cross-Site Request Forgery (CSRF) |
High
8.8
|
< 1.4.1
|
1.4.1 |
2023-11-24 |
—
|
CVE-2023-5886
The WP All Export plugin through version 1.4.1 (and up to 1.8.6 in the PRO version) contains a cross-site request forgery vulnerability caused by insufficient nonce verification on a specific function. An unauthenticated attacker can exploit this flaw by crafting a malicious request that, if clicked by an administrator, could deserialize a PHAR object and lead to remote code execution on the affected WordPress site.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings