CVE-2026-76552 in WP Import Export Lite Plugin
Tóm tắt
Bởi MITRE • 16/09/2026
The WP Import Export Lite WordPress plugin before 3.9.33 does not validate the type, extension or content of files it retrieves from a user-supplied URL during import, allowing users granted its import permission to store arbitrary files, including executable ones, on the server and achieve remote code execution.
If you want to get best quality of vulnerability data, you may have to visit VulDB.