CVE-2023-4724 — WP All Export (Free < 1.4.0, Pro < 1.8.6) - Admin+ RCE

Description (CNA)

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not validate and sanitise the `wp_query` parameter which allows an attacker to run arbitrary command on the remote server

Affected (CNA)

Vendor / product	Versions
Unknown / Export any WordPress data to XML/CSV	affected 0 before 1.4.0
Unknown / WP All Export Pro	affected 0 before 1.8.6

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/48820f1d-45cb-4f1f-990d-d132bfc5536f

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/48820f1d-45cb-4f1f-990d-d132bfc5536f

CISA-ADP

No English description supplied.

No references supplied.