WordPress Export any WordPress data to XML/CSV plugin SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. WordPress Export any WordPress data to XML/CSV plugin version 1.3.5 and earlier is vulnerable to SQL injection, which results from not cleaning or escaping SQL statements before constructing them with cpt parameter is not cleaned or escaped before it is used to construct an SQL statement. An attacker could exploit this vulnerability to execute illegal SQL commands.