Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Comments Import & Export — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Comments Import & Export, with AI-generated Chinese analysis, references, and POCs.

Vendor: WebToffee

CVE IDTitleCVSSSeverityPublished
CVE-2026-32441 WordPress Comments Import & Export plugin <= 2.4.9 - Broken Access Control vulnerability CWE-862 8.2 -2026-03-25
CVE-2025-3919 WordPress Comments Import & Export <= 2.4.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting CWE-79 6.4 Medium2025-06-02
CVE-2024-7514 WordPress Comments Import & Export <= 2.3.7 - Authenticated (Author+) Arbitrary File Read via Directory Traversal CWE-22 6.5 Medium2024-10-11
CVE-2022-45370 WordPress WordPress Comments Import & Export plugin <= 2.3.1 - CSV Injection CWE-1236 6.1 Medium2023-11-07

All 4 known CVE vulnerabilities affecting Comments Import & Export with full Chinese analysis, references, and POCs where available.