CVE-2026-14925

The CVE-2026-14925 affects the Import WP WordPress plugin (versions before 2.14.23). The issue is an missing authorization check on an export-file download handler, allowing unauthenticated attackers to download export files created by administrators. These files may contain personal user data (e...