Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

WP Import Export Lite — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in WP Import Export Lite, with AI-generated Chinese analysis, references, and POCs.

This page aggregates documented security vulnerabilities affecting WP Import Export Lite, categorized by specific weakness types and related vulnerability tags. It collects records of defects reported over the product’s active support lifecycle, covering issues from initial release through recent updates. Readers can use this section to track the vendor’s published advisories, analyze the frequency and nature of specific weakness classes, and review the complete vulnerability history of the product.

Vendor: VJInfotech

CVE ID Title CVSS Severity Published
CVE-2026-76554 WP Import Export Lite < 3.9.35 - Authenticated Privilege Escalation via User Import - - 2026-09-19
CVE-2026-76559 WP Import Export Lite < 3.9.33 - Admin+ SSRF via Import URL Handling - - 2026-09-16
CVE-2026-76558 WP Import Export Lite < 3.9.33 - Contributor+ Stored DOM XSS via Custom Field Names - - 2026-09-16
CVE-2026-76552 WP Import Export Lite < 3.9.33 - Authenticated Arbitrary File Upload via Remote Image Import - - 2026-09-16
CVE-2026-76556 WP Import Export Lite < 3.9.33 - Authenticated SQLi via Export Filter Rules - - 2026-09-16
CVE-2026-76553 WP Import Export Lite < 3.9.33 - Authenticated Arbitrary Directory Deletion via Template Path Traversal - - 2026-09-16
CVE-2026-76555 WP Import Export Lite < 3.9.33 - Authenticated Sensitive File Disclosure via Existing File Import Path Traversal - - 2026-09-16
CVE-2026-76557 WP Import Export Lite < 3.9.33 - Authenticated SQLi via Import Options - - 2026-09-16
CVE-2026-76551 WP Import Export Lite < 3.9.33 - Authenticated RCE via Export Field PHP Function - - 2026-09-16
CVE-2026-76550 WP Import Export Lite < 3.9.34 - Authenticated RCE via Export Template Path Traversal - - 2026-09-16
CVE-2026-11397 WP Import Export Lite <= 3.9.30 - Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' Parameter CWE-918 5.5 Medium 2026-07-03
CVE-2025-5061 WP Import Export Lite <= 3.9.29 - Authenticated (Subscriber+) Arbitrary File Upload CWE-434 7.5 High 2025-08-05
CVE-2025-6207 WP Import Export Lite <= 3.9.28 - Authenticated (Subscriber+) Arbitrary File Upload CWE-434 7.5 High 2025-08-05
CVE-2025-2839 WP Import Export Lite <= 3.9.27 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CWE-79 6.4 Medium 2025-04-22
CVE-2024-31308 WordPress WP Import Export Lite & WP Import Export plugin <= 3.9.26 - PHP Object Injection vulnerability CWE-502 4.4 Medium 2024-04-07

All 15 known CVE vulnerabilities affecting WP Import Export Lite with full Chinese analysis, references, and POCs where available.