VVJInfotech

Products

Exploited and recent CVEs

• CVE-2026-11397 Medium 5.5 WP Import Export Lite <= 3.9.30 - Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' Parameter 0.4%
• CVE-2025-5061 High 7.5 WP Import Export Lite <= 3.9.29 - Authenticated (Subscriber+) Arbitrary File Upload 0.8%
• CVE-2025-6207 High 7.5 WP Import Export Lite <= 3.9.28 - Authenticated (Subscriber+) Arbitrary File Upload 0.8%
• CVE-2025-2839 Medium 6.4 WP Import Export Lite <= 3.9.27 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting 0.3%
• CVE-2024-31308 Medium 4.4 WordPress WP Import Export Lite & WP Import Export plugin <= 3.9.26 - PHP Object Injection vulnerability 0.4%
• CVE-2023-47687 Medium 4.3 WordPress Woo Custom and Sequential Order Number Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
• CVE-2022-0236 High 7.5 WP Import Export (Lite) <= 3.9.15 Unauthenticated Sensitive Data Disclosure 4.3%
• CVE-2022-0236 High 7.5 WP Import Export (Lite) <= 3.9.15 Unauthenticated Sensitive Data Disclosure 4.3%