CVE-2026-76556 in WP Import Export Lite Pluginالمعلومات

الملخص

بحسب MITRE • 16/09/2026

The WP Import Export Lite WordPress plugin before 3.9.33 does not properly sanitise and escape some export filter values before using them in SQL statements, allowing users holding its export permission, which administrators have by default and may also grant to lower roles, to perform SQL injection attacks.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

مسؤول

WPScan

حجز

19/08/2026

إفشاء

16/09/2026

الاعتدال

تمت الموافقة

إدخال

VDB-405461

EPSS

0.00000

KEV

لا

النشاطات

منخفض

القطاع

Hostingprovider

المصادر

Want to stay up to date on a daily basis?

Enable the mail alert feature now!