Export any WordPress data to XML/CSV, CVE-2023-5882

CVE, Research URL: CVE-2023-5882
Home page URL: Security reports for Export any WordPress data to XML/CSV
Application: Export any WordPress data to XML/CSV
Published on: Dec 19, 2023
Research Description: The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not check nonce tokens early enough in the request lifecycle, allowing attackers to make logged in users perform unwanted actions leading to remote code execution.
Affected versions: max 1.4.1.
Status: vulnerable