Skip to content
Noroxi

WP Import Export Lite

wp-import-export-lite · plugin

Known security vulnerabilities for WP Import Export Lite. Find out in seconds which version runs on your site with WP Lens.

6 known vulnerabilities

1 with public exploit code · latest Jul 3, 2026

Vulnerabilities

  • CVE-2025-6207

    WP Import Export Lite <= 3.9.28 - Authenticated (Subscriber+) Arbitrary File Upload

    High 8.8

  • CVE-2025-5061

    WP Import Export Lite <= 3.9.29 - Authenticated (Subscriber+) Arbitrary File Upload

    High 8.8

  • CVE-2022-0236

    WP Import Export (Lite) <= 3.9.15 Unauthenticated Sensitive Data Disclosure

    High 7.5

  • CVE-2024-31308

    WordPress WP Import Export Lite & WP Import Export plugin <= 3.9.26 - PHP Object Injection vulnerability

    High 7.2

  • CVE-2026-11397

    WP Import Export Lite <= 3.9.30 - Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' Parameter

    Medium 5.5

  • CVE-2025-2839

    WP Import Export Lite <= 3.9.27 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

    Medium 5.4

← Back to directory