Lucene search
+L

5 matches found

NVD
NVD
•added 2026/10/17 4:16 a.m.•14 views

CVE-2026-110268

The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.2 via the 'themeslug' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to perform actions on files outsid...

4.9CVSS0.00766EPSS
SaveExploits0References11
EUVD
EUVD
•added 2026/10/17 3:43 a.m.•11 views

EUVD-2026-103219

The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.2 via the 'themeslug' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to perform actions on files outsid...

4.9CVSS5.6AI score0.00766EPSS
SaveExploits0References11
Vulnrichment
Vulnrichment
•added 2026/10/17 3:43 a.m.•4 views

CVE-2026-110268 Post Export Import with Media <= 1.17.2 - Authenticated (Administrator+) Path Traversal via 'theme_slug' Parameter

The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.2 via the 'themeslug' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to perform actions on files outsid...

4.9CVSS5.6AI score0.00766EPSS
SaveExploits0References11
Cvelist
Cvelist
•added 2026/10/17 3:43 a.m.•43 views

CVE-2026-110268 Post Export Import with Media <= 1.17.2 - Authenticated (Administrator+) Path Traversal via 'theme_slug' Parameter

The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.2 via the 'themeslug' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to perform actions on files outsid...

4.9CVSS0.00766EPSS
SaveExploits0References11
CVE
CVE
•added 2026/10/17 3:43 a.m.•15 views

CVE-2026-110268

The Post Export Import with Media plugin for WordPress is vulnerable to a Directory Traversal (CWE-22) vulnerability in all versions up to and including 1.17.2 . The flaw exists in the 'theme_slug' parameter, allowing authenticated attackers with administrator-level access or higher to access or ...

4.9CVSS5.6AI score0.00766EPSS
SaveExploits0References11
Rows per page
Query Builder