CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

RedhatCVE•added 2025/02/09 3:22 p.m.•24 views

CVE-2024-7419

The WP ALL Export Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.9.1 via the custom export fields. This is due to the missing input validation and sanitization of user-supplied data. This makes it possible for unauthenticated attackers to...

8.8CVSS7.6AI score0.00612EPSS

Exploits0References1

NVD•added 2025/02/07 4:15 p.m.•50 views

CVE-2024-7419

8.8CVSS0.00612EPSS

Exploits0References2

Circl•added 2025/02/07 3:23 p.m.•28 views

CVE-2024-7419

creationtimestamp| type| source ---|---|--- 2025-02-07 15:23:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113963289971214761 2025-02-07 16:48:40+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113963625316891058 2025-02-07 18:50:09+00:00| seen|...

8.8CVSS7.8AI score0.00612EPSS

Exploits0References4

CVE•added 2025/02/07 3:21 p.m.•72 views

CVE-2024-7419

CVE-2024-7419: WP All Export Pro for WordPress (versions up to 1.9.1) is vulnerable to unauthenticated remote code execution via the custom export fields due to missing input validation/sanitization of user-provided data. This can allow an attacker to inject PHP code that executes on the server d...

8.8CVSS7.7AI score0.00612EPSS

Exploits0References2Affected Software1