CVE-2026-76556 in WP Import Export Lite Pluginthông tin

Tóm tắt

Bởi MITRE • 16/09/2026

The WP Import Export Lite WordPress plugin before 3.9.33 does not properly sanitise and escape some export filter values before using them in SQL statements, allowing users holding its export permission, which administrators have by default and may also grant to lower roles, to perform SQL injection attacks.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

chịu trách nhiệm

WPScan

Đặt trước

19/08/2026

Tiết lộ

16/09/2026

Kiểm duyệt

được chấp nhận

EPSS

0.00204

KEV

không

Các hoạt động

thấp

Nguồn

Do you want to use VulDB in your project?

Use the official API to access entries easily!