Skip to content
OpenAdvisories

Vendor

wpazleen

6 known vulnerabilities.

Products

Post Export Import with Media 4 SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-104764

    Post Export Import with Media <= 1.17.1 - Authenticated (Administrator+) PHP Object Injection via 'page_data[meta]' Parameter

    The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.17.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with administrator-level acc…

    wpazleen Post Export Import with Media Web / CMS
  • High 7.2
    CVE-2026-13430

    Post Export Import with Media <= 1.13.1 - Authenticated (Administrator+) Arbitrary File Upload via Trailing-Dot Filename Bypass in ZIP Media Import

    The Post Export Import with Media plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.13.1 via the import_media_file_secure function. This is due to insufficient file extension validation caused by a trailing-do…

    wpazleen Post Export Import with Media Web / CMS