Skip to content
OpenAdvisories

Vendor

vjinfotech

7 known vulnerabilities.

Products

WP Import Export Lite 6 WP Import Export 1 Woo Custom and Sequential Order Number 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2025-5061

    WP Import Export Lite <= 3.9.29 - Authenticated (Subscriber+) Arbitrary File Upload

    The WP Import Export Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpie_parse_upload_data' function in all versions up to, and including, 3.9.29. This makes it possible for authenticated attacker…

    vjinfotech WP Import Export Lite Web / CMS
  • High 7.5
    CVE-2025-6207

    WP Import Export Lite <= 3.9.28 - Authenticated (Subscriber+) Arbitrary File Upload

    The WP Import Export Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpie_tempalte_import' function in all versions up to, and including, 3.9.28. This makes it possible for authenticated attackers,…

    vjinfotech WP Import Export Lite Web / CMS
  • High 7.5
    CVE-2022-0236 Public exploit

    WP Import Export (Lite) <= 3.9.15 Unauthenticated Sensitive Data Disclosure

    The WP Import Export WordPress plugin (both free and premium versions) is vulnerable to unauthenticated sensitive data disclosure due to a missing capability check on the download function wpie_process_file_download found in the ~/includes/classes/class-wpie-…

    vjinfotech WP Import Export Lite WP Import Export Web / CMS