Skip to content
OpenAdvisories

Vendor

vjinfotech

7 known vulnerabilities.

Products

WP Import Export Lite 6 WP Import Export 1 Woo Custom and Sequential Order Number 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-11397

    WP Import Export Lite <= 3.9.30 - Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' Parameter

    The WP Import Export Lite plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to and including 3.9.30 via the wpie_import_upload_file_from_url AJAX action. The plugin's URL downloader first calls wp_safe_remote_get() (which co…

    vjinfotech WP Import Export Lite Web / CMS
  • Medium 6.4
    CVE-2025-2839

    WP Import Export Lite <= 3.9.27 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

    The WP Import Export Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpiePreviewData’ function in all versions up to, and including, 3.9.27 due to insufficient input sanitization and output escaping. This makes it possible for …

    vjinfotech WP Import Export Lite Web / CMS
  • Medium 4.4
    CVE-2024-31308

    WordPress WP Import Export Lite & WP Import Export plugin <= 3.9.26 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in VJInfotech WP Import Export Lite.This issue affects WP Import Export Lite: from n/a through 3.9.26.

    vjinfotech WP Import Export Lite
  • Medium 4.3
    CVE-2023-47687

    WordPress Woo Custom and Sequential Order Number Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in VJInfotech Woo Custom and Sequential Order Number plugin <= 2.6.0 versions.

    vjinfotech Woo Custom and Sequential Order Number