CVE-2026-76552 in WP Import Export Lite Plugin
Riassunto
di MITRE • 16/09/2026
The WP Import Export Lite WordPress plugin before 3.9.33 does not validate the type, extension or content of files it retrieves from a user-supplied URL during import, allowing users granted its import permission to store arbitrary files, including executable ones, on the server and achieve remote code execution.
If you want to get best quality of vulnerability data, you may have to visit VulDB.