Design/Logic Flaw

The WP Import Export WordPress plugin both free and premium versions is vulnerable to unauthenticated sensitive data disclosure due to a missing capability check on the download function wpieprocessfiledownload found in the /includes/classes/class-wpie-general.php file. This made it possible for...

CVE-2022-0236: Missing Authorization

The WP Import Export WordPress plugin both free and premium versions is vulnerable to unauthenticated sensitive data disclosure due to a missing capability check on the download function wpieprocessfiledownload found in the /includes/classes/class-wpie-general.php file. This made it possible for...

PT-2022-13055

Name of the Vulnerable Software and Affected Versions WP Import Export WordPress plugin versions up to, and including, 3.9.15 Description The issue is related to unauthenticated sensitive data disclosure due to a missing capability check on the wpie process file download function found in the...