Low · 3.4 CVE-2022-29452 EUVD-2022-33790GHSA-v4c7-53jg-7x9j

WordPress Export All URLs plugin <= 4.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Jun 15, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (editor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Export All URLs plugin <= 4.1 at WordPress.

Vendor	Product	Affected	Fixed
Atlas Gondal	Export All URLs (WordPress plugin)	<= 4.1 – ≤ 4.1	—