What’s Vulnerable › Products
WP Import Export Lite vulnerabilities
10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.
Check whether your WP Import Export Lite version is affected
Latest WP Import Export Lite vulnerabilities
- CVE-2026-76554 — WP Import Export Lite < 3.9.35 - Authenticated Privilege Escalation via User Import (CVSS 7.2)
- CVE-2026-76559 — WP Import Export Lite < 3.9.33 - Admin+ SSRF via Import URL Handling (CVSS 4.1)
- CVE-2026-76558 — WP Import Export Lite < 3.9.33 - Contributor+ Stored DOM XSS via Custom Field Names (CVSS 6.8)
- CVE-2026-76557 — WP Import Export Lite < 3.9.33 - Authenticated SQLi via Import Options (CVSS 6.8)
- CVE-2026-76556 — WP Import Export Lite < 3.9.33 - Authenticated SQLi via Export Filter Rules (CVSS 6.8)
- CVE-2026-76555 — WP Import Export Lite < 3.9.33 - Authenticated Sensitive File Disclosure via Existing File Import Path Traversal (CVSS 6.8)
- CVE-2026-76553 — WP Import Export Lite < 3.9.33 - Authenticated Arbitrary Directory Deletion via Template Path Traversal (CVSS 6.5)
- CVE-2026-76552 — WP Import Export Lite < 3.9.33 - Authenticated Arbitrary File Upload via Remote Image Import (CVSS 8.8)
- CVE-2026-76551 — WP Import Export Lite < 3.9.33 - Authenticated RCE via Export Field PHP Function (CVSS 7.2)
- CVE-2026-76550 — WP Import Export Lite < 3.9.34 - Authenticated RCE via Export Template Path Traversal (CVSS 7.2)