CVE-2026-76552 in WP Import Export Lite Plugin
摘要
由 MITRE • 2026-09-16
The WP Import Export Lite WordPress plugin before 3.9.33 does not validate the type, extension or content of files it retrieves from a user-supplied URL during import, allowing users granted its import permission to store arbitrary files, including executable ones, on the server and achieve remote code execution.
If you want to get best quality of vulnerability data, you may have to visit VulDB.