Export any WordPress data to XML/CSV, CVE-2023-4724

CVE, Research URL: CVE-2023-4724
Home page URL: Security reports for Export any WordPress data to XML/CSV
Application: Export any WordPress data to XML/CSV
Published on: Dec 19, 2023
Research Description: The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not validate and sanitise the `wp_query` parameter which allows an attacker to run arbitrary command on the remote server
Affected versions: max 1.4.1.
Status: vulnerable