Export All Urls (Unknown) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-04-01. Vendor: Unknown.

CVEs of Export All Urls

• CVE-2026-2696 - CVSS 5.3 (medium), 2026-04-01: The Export All URLs WordPress plugin before 5.1 generates CSV filenames containing posts URLS (including private posts) in a predictable pattern using a…
• CVE-2023-3118 - CVSS 6.1 (medium), 2023-07-10: The Export All URLs WordPress plugin before 4.6 does not sanitise and escape a parameter before outputting them back in the page, leading to a Reflected…
• CVE-2022-2638 - CVSS 6.5 (medium), 2022-08-29: The Export All URLs WordPress plugin before 4.4 does not validate the path of the file to be removed on the system which is supposed to be the CSV file. This…
• CVE-2022-0914 - CVSS 6.5 (medium), 2022-04-11: The Export All URLs WordPress plugin before 4.3 does not have CSRF in place when exporting data, which could allow attackers to make a logged in admin export…
• CVE-2022-0892 - CVSS 6.1 (medium), 2022-04-11: The Export All URLs WordPress plugin before 4.2 does not sanitise and escape the CSV filename before outputting it back in the page, leading to a Reflected…