What’s Vulnerable › Products

vjinfotech WP Import Export Lite vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your vjinfotech WP Import Export Lite version is affected

Latest vjinfotech WP Import Export Lite vulnerabilities

• CVE-2026-11397 — WP Import Export Lite <= 3.9.30 - Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' Parameter (CVSS 5.5)
• CVE-2025-6207 — WP Import Export Lite <= 3.9.28 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8)
• CVE-2025-5061 — WP Import Export Lite <= 3.9.29 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8)
• CVE-2025-2839 — WP Import Export Lite <= 3.9.27 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-31308 — WordPress WP Import Export Lite & WP Import Export plugin <= 3.9.26 - PHP Object Injection vulnerability (CVSS 7.2)
• CVE-2022-0236 — WP Import Export (Lite) <= 3.9.15 Unauthenticated Sensitive Data Disclosure (CVSS 7.5)