Skip to content
OpenAdvisories

Vendor

Smackcoders

35 known vulnerabilities.

Products

WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress 12 Export All Posts, Products, Orders, Refunds & Users 5 WP Ultimate Exporter 3 SendGrid for WordPress 3 Lead Form Data Collection to CRM 3 AIO Performance Profiler, Monitor, Optimize, Compress & Debug 2 Google SEO Pressor Snippet 2 WP Ultimate CSV Importer 2 WP Import – Ultimate CSV XML Importer for WordPress 1 WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel 1 WordPress Helpdesk Integration 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-2332

    Export All Posts, Products, Orders, Refunds & Users <= 2.13 - Unauthenticated PHP Object Injection

    The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.13 via deserialization of untrusted input in the 'returnMetaValueAsCustomerInput' function. This makes i…

    Smackcoders Export All Posts, Products, Orders, Refunds & Users Web / CMS
  • Critical 9.1
    CVE-2024-56278 Public exploit

    WordPress WP Ultimate Exporter plugin <= 2.9.1 - Remote Code Execution (RCE) vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in Smackcoders Inc., WP Ultimate Exporter wp-ultimate-exporter allows PHP Remote File Inclusion.This issue affects WP Ultimate Exporter: from n/a through <= 2.9.1.

    Smackcoders WP Ultimate Exporter